Frequently Asked Questions

Yes, free. No accounts, no sign-in, no paywalls. Every page works for first-time visitors with zero state required. Some tools (like WhoAmI) ask for explicit consent before reading browser-side data — you can decline and the page still shows the server-derived information.

The codebase is open source under the MIT License — see the GitHub repository for source, plans, and design specs.

There's a small in-house analytics counter for two things:

• Page-view counts per route (no IP, no fingerprint, no third-party calls)
• Tool-action counts (e.g. “weather city searched”) used to gauge what to improve

IPs that reach our analytics endpoints are immediately hashed (SHA-256 + daily salt) before logging. There is no Google Analytics, Meta pixel, or third-party tag manager. Cookie consent gates these counters — declining means we count nothing.

The Catppuccin Mocha palette is dark; the matching Latte palette switches in via next-themes when you toggle the moon/sun in the navbar. Both modes use the same monospace typography (JetBrains Mono) and 6 px radii — only the surface, text, and accent tokens swap.

All routes are fully responsive. Layouts collapse from 3-column → 2-column → 1-column at standard Tailwind breakpoints (lg → md → base). Heavy modules (WhoAmI deep tier, Weather) were tested on iPhone Safari, Android Chrome, and iPad in landscape. If something looks off on your device, please file an issue on GitHub with a screenshot.

Two tiers, both consent-gated:

• Server tier (always-on, no consent): your public IP via the request headers, plus geolocation lookup against ipwho.is (with ipapi.co as fallback). The IP is masked for display (last octet stripped) and hashed for logs.
• Basic browser tier (consent required): navigator API surface (language, platform, hardware concurrency, device memory), screen dimensions, and WebGL renderer.
• Deep tier (separate re-consent): canvas + audio SHA-256 fingerprints, WebRTC IP leak probe, and permission-state queries.

Many browsers — including Chromium-based ones — return denied fromnavigator.permissions.query() by default for Camera and Microphone on origins that have never requested them. It's the safe default, not a record of your past choice. WhoAmI only queries the state; we never call .request(), so no real prompt fires regardless of the displayed status.

Nowhere except your clipboard / Downloads folder. Both actions are pure browser APIs — no network request fires. You can verify in DevTools → Network: clicking either button produces zero new entries. The Visit Comparison card likewise stores its snapshot in your browser's localStorage; the server never sees it.

That's the test working as intended. WebRTC peer connections discover your real public IP via STUN to enable NAT traversal — even when you're behind a VPN, unless the VPN client explicitly blocks WebRTC. The only way for our card to show the leak is to perform the leak ourselves (talking to Google's STUN server). The result lives entirely in your browser — we don't transmit the discovered IP back to our origin.

Open-Meteo — a free, no-key weather API that aggregates NOAA, DWD, and ECMWF data. Geocoding, current conditions, hourly forecast, daily forecast, and air quality each hit a separate endpoint, all proxied through our /api/weather route to keep your IP off their logs.

Both live in localStorage via Zustand's persist middleware (key: revolarch-weather). Clearing site data resets them. There's no server-side user state.

We use the European AQI bands from Open-Meteo (different from US EPA bands):

• 0–40 Good (green)
• 41–60 Fair (info / blue)
• 61–100 Moderate (yellow)
• 101–150 Poor (red)
• 151+ Very Poor (dark red)

The card's accent border colour reflects the band so you can scan air quality at a glance.

Either ipwho.is and ipapi.co are both rate-limiting our VPS (rare — there's a 10-second timeout per provider with automatic fallback), or you're running on a local network where the source IP resolves to a private range. The page degrades gracefully: server cards show “Lookup unavailable” while the rest of the module continues to work.

That's expected — by design, RevolArch never persists user state on the server. Use Share Profile → Download .json on WhoAmI to keep snapshots offline; favorites in Weather are gone after a clear unless re-added. We chose this trade-off so privacy requires no trust.

Quick diagnostic checklist:

1. Hard reload: Ctrl/Cmd + Shift + R
2. Open DevTools → Console; share any error lines starting with “Refused” or “Uncaught”
3. Disable browser extensions one at a time (ad blockers can break legitimate scripts)
4. Try a different browser to isolate

If the issue persists, please contact us with the failing URL, browser version, and a console screenshot.