PRIVACY

I don't sell your data, to anyone, ever. There are no ad networks and no advertising SDKs on this site. Three things measure traffic here: a small analytics beacon I built and run myself, Google Analytics, and Cloudflare. Two things collect information you type on purpose: the contact form and the newsletter signup. That is the whole list, and the rest of this page explains each one.

Loading a page here sends a few things to a collector I own and operate: the page you're on, the page that referred you, roughly where you are (country, region and city, worked out from your IP address by Cloudflare's network, never GPS or a device permission), your browser and device type, your screen size, and your connection speed.

It also records how the page gets used: clicks, how far you scroll, how long you're actively reading, whether a link took you off site, whether something on the page errored, and how quickly the site responded when you tapped. It notes when you copy something, meaning the fact that a copy happened on a page, never what was copied.

On forms, it records field names and whether you focused or left a field. If you start filling in the contact form and leave without sending it, the record says which field you stopped on. It does not say what you typed there, because it never reads that at all.

It never reads the contents of any input, text box or dropdown on this site, and it records no keystrokes. There is no code in it that reads a field's value, and the skip happens before anything is labelled, so a half typed email address cannot reach the collector even by accident.

Your browser stores a random ID in local storage, not a cookie, so the split between new and returning visitors is real rather than guessed. Browsers scope local storage to one site, so that ID is unreadable on any other site, including my other projects. It carries no name and no contact details.

If your browser sends a Do Not Track or Global Privacy Control signal, the beacon honors it: the visit is still counted, but no durable ID is created or read, so you are never tracked as a repeat visitor.

This site also runs Google Analytics 4, which is a third party. It sets its own cookies and sends your visit to Google, under Google's privacy policy, not mine. I use it for aggregate traffic reporting only. If you would rather it didn't run, Google publishes a browser opt-out add-on, and most content blockers stop it too. Nothing on this site breaks if you block it.

The site is hosted on Cloudflare, so Cloudflare handles every request and keeps its own standard logs. It may also load a cookieless performance beacon that measures page speed. Neither identifies you personally to me.

Separate from anything above. If you send me a message, the name, email address and message you type are delivered to my inbox by a form service so I can reply. That is the only use. I don't add you to the newsletter from it, and I don't pass it on.

If you subscribe, your email address is stored in a private database I control, along with when you signed up and whether you confirmed. Nothing else. Every signup has to be confirmed by clicking a link in an email, so nobody can add you without your say so, and the confirmation email is sent through an email provider on my behalf.

Every dispatch carries an unsubscribe link, and unsubscribing takes effect immediately. Ask me to delete your address outright and I will.

Nobody but me, apart from the specific services named above doing the jobs described. Analytics data lives in a private database I control, is never published on a public page, and is never sold or handed to a data broker. There is no cross-site tracking here.

If I add or remove anything that collects data, this page changes in the same release, and the effective date above moves with it.

Use the contact form and ask me directly. That includes asking what I have on you, or asking me to delete it.