Privacy Policy.

Effective 31 August 2026 · Last updated 7 October 2026

Who runs this

caboose-ai.io and its subdomains are operated by an individual ("the operator", "we", "I") as a non-commercial hobby project. Contact: [email protected].

What this policy covers

• caboose-ai.io: the public landing page and its live status checks.
• edit.caboose-ai.io: Moto Edit, a private, password-protected video editing tool used by the operator.
• grafana.caboose-ai.io, labs.caboose-ai.io, machine.caboose-ai.io, mcp.caboose-ai.io: private monitoring and experimental endpoints.
• boba.caboose-ai.io: bōba, a show in which AI characters argue and draw; a show can only be watched with a link the operator hands out.
• mc.caboose-ai.io, pw.caboose-ai.io: Minecraft and Palworld game servers for the operator and invited friends. Retired for now: neither is running.

What is collected

Public landing page

No cookies, no analytics, no tracking scripts. The page runs status checks from your browser directly against the listed services; those checks are not recorded.

Network and server logs

All traffic reaches this site through Cloudflare, which processes connection metadata including your IP address under Cloudflare's privacy policy. On the server, ordinary web-server logs and metrics (timestamp, requested path, response code, response time, and IP address) are retained for roughly two weeks for troubleshooting and capacity planning, then automatically deleted.

Moto Edit (edit.caboose-ai.io)

Access requires a password. There is no sign-up, no public account creation, and no invitation flow. It is a single-operator tool. It stores:

• Video and audio files uploaded by the operator, stored on local disk on the operator's own hardware.
• Derived data: thumbnails, low-resolution previews, and numerical analysis of motion and audio used to pick highlights.
• One authentication cookie (moto_edit_session) so the session persists. It contains an expiry timestamp and a signature (no personal information) and is not used for tracking.

Video analysis, license-plate and face blurring, and prompt matching all run locally on the operator's machine using models stored on that machine. Video content is not sent to any external AI service, is not used to train any model, and is not shared with anyone.

bōba (boba.caboose-ai.io)

There are no accounts and no cookies. A show is started only by the operator and is watched through a private link. What is kept:

• The show itself (everything the AI characters wrote and drew) is stored on the operator's own hardware and deleted about seven days after the show ends.
• In your browser only: your view, motion and sound choices, and, for a show rated above PG-13, the fact that you accepted its content warning for this visit. None of this is sent to the server.

The text and pictures are written live by third-party AI language models and are not reviewed before you see them. The models receive the show's topic and what the characters have said; they receive nothing about the people watching. Each show carries a content rating; shows rated above PG-13 are for adults and say so before they load.

Game servers

(Retired for now; this describes what they recorded while running.) Minecraft and Palworld servers record standard gameplay data (usernames, player identifiers, in-game chat, and connecting IP addresses) in server logs and world save files, for server administration and moderation.

Google and YouTube data

Moto Edit can optionally publish the operator's own finished videos to the operator's own YouTube channel. If that feature is connected:

• Authorization uses Google OAuth with the scope youtube.upload, which permits uploading videos. It does not grant access to watch history, subscriptions, comments, analytics, or personal Google account data.
• Optionally, and only if the operator explicitly chooses to re-authorize for it, the scope youtube is also requested so an uploaded video can be added to one of the operator's own playlists. It is used solely to list playlist titles for a chooser and to add a just-published video to the selected playlist. Publishing works without it.
• A refresh token and the channel's public name are stored in a permission-restricted file on the operator's own server. Tokens are never displayed, logged, or transmitted anywhere except to Google when uploading.
• The connection is used only to upload videos the operator explicitly chooses.

Moto Edit's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Access can be revoked at any time from your Google account permissions page, or by using the Unlink button in the application, which deletes the stored token immediately.

What is never done

• No selling, renting, or sharing of personal information.
• No advertising networks, no behavioral profiling, no cross-site tracking.
• No third-party analytics.
• No use of uploaded content to train machine-learning models.

Service providers

Two third parties necessarily handle traffic: Cloudflare, which provides DNS and the tunnel carrying traffic to the server, and Google/YouTube, only when the optional publishing feature is used and only for that purpose. No other processors are involved. Everything else is stored on hardware the operator physically owns.

Security

Private services are password-protected and served over HTTPS. Credentials and tokens are stored outside the codebase with restricted file permissions. That said, this is a hobby system run by one person: it carries no security guarantee, and you should not send it anything sensitive.

Children

These services are not directed to children under 13, and no information is knowingly collected from them.

Your choices

To ask what data relating to you exists here, or to request its deletion, email [email protected]. Because this is a small personal system, such requests are handled manually and honored wherever technically possible.

Changes

This policy may change as the services change. The effective date at the top will be updated when it does.