Skip to content

Privacy

Last updated 2026-05-12

The short version

  • Wanilog runs in your browser. There is no Wanilog server holding your data.
  • Your WaniKani API key stays on your device and is sent only to api.wanikani.com.
  • A small set of usage events are sent to PostHog so the app can improve over time. Each event is tagged with your WaniKani username and level.
  • Analytics can be switched off at any time in Settings.

Your API key stays on your device

Your WaniKani API key is stored in your browser's localStorage and is used only when Wanilog fetches your data from api.wanikani.com. It is not transmitted to PostHog, Vercel, or any other service. Logging out removes it from your device.

Why analytics exist here

Wanilog is a personal side project. Usage data is what makes prioritisation possible. Knowing that the leech trainer is used more often than the share card is what informed the decision to ship keyboard shortcuts there first. Crash reports surface bugs that affect real users without requiring them to file an issue.

What is sent to PostHog

Each event is tagged with your WaniKani username and level. That makes the data identifiable rather than anonymous, which is what enables cohort analysis such as tracking engagement by level.

  • Pageviews. Pathname only. Query strings and URL fragments are stripped.
  • Feature usage. Named events such as "leech trainer started" or "share card downloaded". Numeric properties are bucketed (for example 10-49 or 50-99) before transmission.
  • Clicks. PostHog autocapture records the element type, CSS selector, visible text, and link target of the buttons and links you interact with. The contents of input, textarea, password, and hidden fields are stripped before transmission.
  • Web vitals. Page-load timings (LCP, CLS, INP, FCP) used to detect performance regressions between releases.
  • Crashes. Uncaught JavaScript exceptions with stack traces of Wanilog's own source, used to diagnose and fix bugs.
  • Session replays. PostHog records DOM-level interactions (clicks, scrolls, navigation, and timing) using rrweb. All form inputs, including the "Can I read this" textarea and the API key field, are masked before recording. Replays are retained for 30 days.

Requests to WaniKani, PostHog, and Vercel necessarily include your IP address and User-Agent. Those services may observe them; Wanilog does not log them.

What is not collected

Data leaves your device only to WaniKani's API, to PostHog (analytics), and to Vercel (hosting). There is no Google Analytics, no Meta pixel, no advertising network integration, no data broker, and no AI model training. The Can I read this analyzer never transmits what you enter. Demo mode is fully silent: no events fire while it is active.

Cookies and local storage

wk_uid is a random identifier generated in your browser on first visit. PostHog uses it to associate events from the same browser. It is not derived from your API key or username, expires after twelve months of inactivity, and is removed when you clear site data.

localStoragealso holds your API key, settings, theme, sync timestamps, and a cached copy of your WaniKani data for offline use. None of it leaves your device. You can inspect or remove it through your browser's developer tools, or by resetting via Settings.

The one server route

Wanilog has a single server-side route, /api/nhk, which proxies NHK Easy News so that the Reading Coverage page can fetch headlines without cross-origin issues. It does not see your API key or WaniKani data.

Turning analytics off

Open Settings and turn off Help improve Wanilog. The change takes effect immediately and persists across sessions.

For a network-level block, any content blocker that drops requests to shiba.wanilog.com, such as uBlock Origin, Brave Shields, NextDNS, or an entry in your hosts file, prevents analytics from being transmitted. The rest of the application continues to function as expected.

Removing your data

Email privacy@wanilog.com to have your data deleted, request a copy of what is held, or correct anything inaccurate.

Contact

Wanilog is operated as a personal side project. For privacy-related questions, please email privacy@wanilog.com. Wanilog will not sell your data, display advertisements, share data with any third party outside the two processors named above, or use your data to train an AI model.

← Back to home