Privacy

Short version: this site does not collect any data about you. No analytics, no cookies, no tracking, no ads.

I write about security and privacy, so it would be a little embarrassing to run a blog that quietly harvested its readers. This one does not. Here is exactly what that means, in plain terms.

What this site collects

Nothing. There is no analytics, no tracking pixel, no advertising, no fingerprinting, and no third-party scripts running on these pages. There are no accounts, no comments, no forms, and no newsletter signup, so there is nothing to fill in and nothing to submit.

The one thing stored in your browser

If you use the light and dark theme toggle, the site saves your choice in your browser’s localStorage under a key called theme. That value never leaves your device and is never sent to me or anyone else. It exists only so the site remembers your preference on your next visit. Clear your browser storage and it is gone. That is the only thing this site writes to your browser, and it does not set any cookies.

No third-party requests

Everything a page loads (the fonts, the images, the styles, and the small bit of JavaScript for the theme toggle) is served from this domain. The fonts are self-hosted rather than pulled from Google Fonts, and there are no external embeds. Loading a page here does not quietly call out to anyone else’s servers.

The obvious exception is up to you: if a post links to another site and you click it, you go to that site, which has its own rules.

Hosting: Cloudflare

This is a static site hosted on Cloudflare Pages. As the hosting and CDN provider, Cloudflare sits between your browser and the site in order to deliver it to you. Anything Cloudflare collects or processes in that role is governed entirely by Cloudflare’s own privacy policy and data processing terms, not by me. For what that involves, refer to them directly:

To be clear about the boundary: I do not run any analytics, I have not enabled visitor tracking, and I have no dashboard that identifies you individually or ties you personally to what you read. Whatever happens at the hosting layer is between you and Cloudflare under their policy. I do not collect, store, or look at anything about you.

If you contact me

There is no contact form here. If you reach out by email or on social media, that conversation happens on those platforms, each with their own privacy policies, and I only know what you choose to tell me directly.

Changes

If any of this ever changes, for example if I ever add something like privacy-respecting analytics, I will update this page and say so plainly. For now the honest answer is the simple one: I am not collecting anything.

In good faith

Full disclosure: I am leaning heavily on large language models (LLMs) to build, edit, and configure this site, including this page. I have tried hard to make sure everything here is accurate, but if you find a statement in this policy that is wrong or misleading, please tell me and I will fix it.

The bottom line, in case any of the detail above ever drifts out of date: I do not want any trackers on this site, and I do not want any information collected about the people who read it. I will do everything I can to keep it that way.