Changelog

A calmer, single design

The whole site was rebuilt on one brand and design system, and gained the tools to scan a CKey and check a link.

• New brand and design system: the Open CKey mark, Newsreader and Public Sans served from this site, a warm paper palette with one evergreen accent, and shared components for every page.
• Scanner (/scan): reads a CKey from your camera in the browser and shows what it holds before anything opens.
• Link status (/status): shows whether an Open CKey address is active, pending its safety scan, expired, retired or blocked, with a way to report it.
• New pages: how CKey works, with an annotated anatomy of a real symbol; questions; and this changelog.
• Docs: a shared side navigation, copy buttons on code samples, printing guidance, and a complete API reference with status codes and limits.
• Downloads: install steps for every ecosystem and a clearer state before the first release is published.

The first complete site

• Renderer (/render): the CKey core as WebAssembly, built from a pinned core commit. Profile 0 versions, error correction levels, layouts and raster policies; transparency, presets and style policies; certification with a backdrop picker; PNG, SVG and PDF downloads, plus print export at a physical size; and payload hints, with no automatic actions.
• Downloads (/downloads): CKey packages with their SHA-256 and verification steps, and deprecation badges from the core’s support matrix, fetched and verified at build time.
• Docs and policy pages: the docs overview, payload conventions, SDK quick starts, telemetry with a live summary, and the API; privacy, terms and the report form; security.txt, robots.txt and a sitemap. Each page has its own content security policy.
• Telemetry intake: /api/telemetry/v1/batch and /api/telemetry/v1/summary, with a strict schema-1 parser, rate limits keyed by a salted hash, a daily cap, daily aggregates only and 400-day retention.
• Abuse reports: /api/reports and the operator review endpoints. Reports are append-only, and their details are erased after 24 months.
• Fixed: revoking a retired record now answers that it is retired instead of failing.
• Privacy: Workers invocation logs are turned off.

Destinations

• Hosted text and short links: /text/{id} and /sq/{id}, as records that can’t be edited, with addresses that are never reused, verified creation, a safety scan before a short link activates, and retirement after 24 months.