Privacy.

Visiting

I count visits myself, with a few lines of the site's own code, and without cookies. For each page you view, the site stores the page's address (without anything after a "?"), the name of the website that sent you here (such as linkedin.com), whether you're on a phone, tablet or computer, your browser and operating system, and your country, which Cloudflare works out from your connection.

To tell visitors apart within a day, it also stores a scrambled code made from your IP address, your browser and the date. The code can't be turned back into your address, and it changes every day, so I can't follow anyone from one day to the next. Your IP address itself is never stored.

Search engine robots aren't counted, and neither is anyone whose browser sends Do Not Track or Global Privacy Control, or doesn't run JavaScript. Page views are deleted automatically after 400 days.

I also use PostHog to see how the site is used: which pages you view, what you click on them, the website that sent you here, your browser and device, and your country (from Cloudflare, as above). PostHog sets no cookies and stores nothing in your browser, so it can't recognise you on a later visit, and it doesn't record your screen. It is switched off too when your browser sends Do Not Track or Global Privacy Control.

Cookies

Reading the site sets no cookies. If you choose Light or Dark, that choice is saved in your own browser and never sent to me. Sending a message sets one cookie that only carries the "thanks" note to the next page. It holds nothing about you and goes away when you close your browser.

Messages and offers

When you use the contact form or make an offer on a domain, the site stores your name, your email address, your message and, for an offer, the amount you wrote. I get an email about it, sent through Postmark, so I can reply. To stop the form being flooded, the site also stores a scrambled code made from your IP address and the date, made the same one-way way.

To keep out bots, once you start filling in a form your browser loads Cloudflare Turnstile, a check that tells people from bots. It usually runs unseen, and sometimes asks you to tick a box. Cloudflare sees your IP address and some details about your browser for this, and tells the site only whether you passed.

Messages stay until I delete them. If you'd like to know what I have, or want yours deleted, send me a message saying so.

Who else is involved

• Cloudflare sits in front of the site. Every visit passes through it, so it sees your IP address in order to deliver the page and keep attacks out. It also runs the bot check on the forms.
• Postmark delivers the email that tells me about a new message.
• The site runs on a server I rent from Hetzner in Europe. The pictures on the site and nightly copies of its database are stored with Amazon Web Services in Canada.
• PostHog, in the United States, receives the page views and clicks described under Visiting. Its script loads from PostHog's own website.
• If something on the site breaks, an error report goes to Honeybadger so I can fix it. Reports leave out your IP address and anything you typed.

Apart from PostHog, and the bot check once you start filling in a form, the pages load nothing from any other website: no ads, embedded videos or outside fonts. I don't sell or share anything you send.

Last updated 28 October 2026.