This is a personal site. It doesn't use analytics, advertising or tracking cookies, and it collects as little as it can to work. Here is everything it does with your data.
What happens when you visit#
Like any website, my host receives your IP address and basic request details (browser, page, time) to deliver the pages and keep the service secure. That is in their server logs, not in a profile of you. The site also reads your browser's language, and the country your request comes from, to pick the language of the greeting. Neither is stored.
Likes and dislikes#
If you like or dislike a post, the site stores your vote next to a salted, one-way hash of your IP address, so one visitor gets one vote. The address itself is not stored and the hash can't be turned back into it. Taking your vote back deletes the entry.
Rate limiting#
To stop abuse, the site keeps a short-lived counter per IP address for actions like voting or signing in. Counters are deleted automatically when their time window ends (minutes to an hour).
Cookies and local storage#
Visitors get no cookies. The only cookie is a login session for the site's admin area, set when I sign in. Nothing about you is saved in your browser's local storage.
Other services#
- Discord. The profile picture, status, emoji and game icons come from Discord's servers. Your browser fetches the images directly, so Discord sees your IP address as it would for any image. The status itself is my own, fetched through the public Lanyard service by the server, so it involves nothing of yours.
- GitHub. Repository stats are fetched from GitHub by the server, not by your browser.
- Share buttons. These are plain links. Nothing is sent to X, Bluesky, Reddit, LinkedIn or Telegram unless you click one, and then their own policies apply.
- Short links. A /go/ link only counts how many times it was opened, with nothing that identifies you.
- Hosting. The site and its database are run by third-party hosting providers who process data on my behalf to serve it.
AI accounts#
If I'm offering the AI section and you create an account, I store your email address, a hash of your password (never the password), the hashes of your API keys, how many tokens you've used each day, and a log of each request's model and token counts. I don't store the prompts or replies. They are sent on to the model provider I use to answer them, and that provider's own terms apply to them. A cookie keeps you signed in. You can ask me to delete the account and its records at any time.
Your rights#
If you're in the EU/EEA or UK, you can ask what I hold about you, ask me to correct or delete it, or object to how it's used. Because votes are stored as one-way hashes, I usually can't tell which one is yours. I can still remove any you point me to. You can also complain to your local data protection authority.
Changes#
If this changes I'll update it here and change the date above.
Questions or requests: reach me through any of the links on the home page.