wtf is quietsky-privacy-proxy?

This repository is the privacy core of Quiet Sky, a weather app's proxy service, built as a Cloudflare Worker. Every request from the Quiet Sky Android app to a weather provider passes through this code, and its job is to strip out anything that could identify the person or device making the request, such as an IP address, device headers, cookies, or tokens, before the request continues on to the weather provider. The author is explicit that this repository exists so people can verify the privacy claims, not so they can reuse the whole system. The parts that handle identity stripping, cache key construction, logging, and rate limiting are all public and can be inspected. The actual code that talks to specific weather providers is kept private, and instead a SHA-256 hash file is published with each release so anyone can confirm the withheld code has not silently changed, even without seeing it. Two rules are enforced by the project's own automated test suite. First, only a small block of code near the top of the main file is ever allowed to read identifying information from an incoming request, and a test scans the rest of the code to make sure nothing else touches it. Second, every request sent onward to a weather provider is built completely from scratch in one place, so there is no way for inbound headers to accidentally get copied into an outgoing request. The proxy still sends location coordinates to providers, because a weather forecast needs to know where you are, but the precision of that location is controlled by a setting in the app itself. What gets removed is identity information, not location. Cached weather data is stored by rounded coordinates shared across nearby users, never tied to a specific person, and the project's logs only record aggregate counts and outcomes rather than anything that could identify a request or its sender. The project is licensed under Apache 2.0, which allows use, modification, and redistribution, including commercially, as long as the license terms and any required notices are preserved.