Privacy

This blog collects as little as it can. Here's what it does collect, and why.

Analytics

If you click Accept on the cookie banner, the site loads Google Analytics to count visits. Google Analytics sets cookies (_ga and _ga_<id>) and sends Google the pages you view, your browser and device type, and your approximate location. Advertising features are always off. If you click Decline, or don't choose either, Google Analytics isn't loaded at all, and nothing is sent to Google.

Your choice is stored in your browser's local storage, not in a cookie, and never leaves your device. You can change it at any time:

Switching to Decline also deletes the Google Analytics cookies.

The site also uses Cloudflare Web Analytics, which counts page views without cookies and without tracking you across sites, so it doesn't need your consent.

Comments

Comments are optional. When you post one, the site stores your name, your comment and your email address. Your email is never shown. It's used once, after your comment is approved, to fetch your Gravatar (Gravatar receives a hash of your email address, not the address itself). The site keeps its own copy of the picture and then deletes your email. If your comment is rejected, the comment and your email are deleted 30 days later.

Every comment is checked by hand before it appears. The comment form uses Cloudflare Turnstile to tell people from bots. Turnstile loads only once you click into the comment form, so just reading a post never contacts it.

Hosting

The site and its comments are hosted by Cloudflare, which processes requests (including your IP address) to serve the site and protect it from abuse.