Policy draft
Privacy
Information used by the service
IsAIokay.com stores your public GitHub identity and account creation date to protect aggregate integrity, configured coding subscriptions, prompt-free usage metadata, optional ratings and comments, and privacy-preserving hashed network/device signals. GitHub sign-in requests no email or repository access. An optional X username is stored only if you provide it. We do not post to GitHub or X or sell personal data.
Optional CLI
The optional CLI reads provider-owned session files only to extract documented token counters, model and reasoning-effort labels, service tier, timestamps, and quota state. Prompts, model responses, source code, repository names, file paths, diffs, and shell commands are discarded and cannot enter the upload schema. Raw session and request IDs are replaced locally with installation-secret HMACs. Local collection is configured per subscription; contributing private measurements to community aggregates is a separate opt-in.
Uploaded usage slices contain a random event ID, the configured subscription and harness, reported/requested model, effort or variant, main/subagent/auxiliary source, input/cache/output/reasoning token counters, attribution quality, and observation time. Quota snapshots contain only the provider's percentage and reset metadata. Provider credentials, cookies, API keys, prompts, responses, and raw identifiers are never uploaded.
Public subscription aggregates and optional profiles
Developer profiles are private by default. If you explicitly make yours public, the site displays your GitHub username, public display name and avatar, optional self-declared X username, structured model ratings, model usage counts, and optional coding-agent context. It never publishes comments, session identifiers, network or device hashes, trust metadata, or moderation data on a profile.
Public subscription rankings use only opted-in aggregates and suppress plan measurements until at least five independent contributors qualify. The same threshold is applied separately to every model/effort/source breakdown and to satisfaction. They show thresholded sample size, freshness, eligible model mix, exact-versus-estimated coverage, and methodology version. They do not expose individual sessions, identities, or below-threshold counts. Administrators can moderate optional reports and maintain the public plan and price catalog.
You can delete your account from profile settings. Deletion removes raw usage slices, quota snapshots, configured subscriptions, your public profile, linked GitHub identity, active sessions, CLI installations, optional notes and tags, and retained network or device hashes. Minimal de-identified outcome records remain for aggregate integrity: the reported model, optional coding agent, numeric scores, submission source and timestamps, and moderation fields. They remain attached only to a random internal tombstone and are not shown as a developer profile.
To prevent deletion and re-registration from resetting voting limits, the service permanently retains a secret-keyed, irreversible marker derived from the stable GitHub account ID. The marker is used only to block that GitHub account from registering again; it does not contain the GitHub ID or username.
Website analytics
On the public subscription-ranking homepage, IsAIokay.com uses PostHog Cloud to count page views, returning visits, and a small number of product actions such as copying a CLI setup command. PostHog stores a random first-party analytics identifier in a cookie and browser local storage so visits from the same browser can be recognized over time. The identifier is not connected to an IsAIokay account, GitHub or X identity, or activity on other websites. Analytics is not loaded on account, profile, administration, or CLI authorization and verification pages.
Session replay, page-leave capture, heatmaps, automatic click capture, surveys, feature flags, performance capture, and automatic error capture are disabled. Analytics events do not include rating values, comments, tags, GitHub or X usernames, application session identifiers, or full visited-page query strings. Standard campaign-attribution fields may be extracted before the page URL is stripped. Analytics requests are sent through IsAIokay.com to the configured PostHog Cloud region; PostHog receives standard request and browser metadata, including IP address and user agent. Clearing this site's browser data resets the analytics identifier.
Contact and support
For privacy requests or any support question, email hi@isaiokay.com.