Privacy & Cookies

We use GoatCounter to count page views. It runs only after you accept, and rejecting it means the script is never loaded at all.

GoatCounter does not use cookies and does not build a profile of you. To tell a repeat visit from a new one it hashes your IP address and browser user agent together with a salt that is thrown away and regenerated every day. The hash cannot be reversed to your address, and the address itself is not kept.

What we see is a list of pages, the country a visit came from, and which site linked to us. We use it to know which pages are worth keeping.

Cloudflare adds a second measurement script of its own, called Web Analytics, to every page it serves for us. It sets no cookies and writes nothing to your device, so the prompt does not govern it. On this page and on the four main pages of the site it never runs, because the security policy those pages carry refuses to load it. It does still run on the older pages at /squid-qc, /pu, /whop, /hikarigo and /muslih, which were built by hand before that policy existed. We are deciding whether to turn it off at source.

Serving a page means other companies handle the connection. Each of them receives your IP address as a technical necessity of delivering the bytes.

The pages are hosted on GitHub Pages, operated by GitHub, Inc. Cloudflare sits in front as the DNS and content delivery layer, and injects the beacon described above. GoatCounter is reached at gc.zgo.at, and only once you have accepted.

Typefaces used to come from Google Fonts, which handed Google your IP address before any prompt could appear, since a page cannot render without a typeface. They are served from this domain now, so that request no longer happens and Google is no longer involved in showing you this page.

Mail to [email protected] is delivered through Apple's iCloud Mail custom domain service, so Apple handles the message in transit and at rest.

We keep what you send so we can reply, and if we end up working together, as part of the record of that engagement. We do not add you to a mailing list and we do not pass your address on.

You can ask what we hold about you, ask us to correct it or delete it, object to how we use it, and withdraw any consent you have given. Withdrawing is meant to be as easy as giving it, which is why the Cookie settings link sits in the footer of every page.

Write to [email protected] and we will answer. If you are in the United Kingdom and you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We operate from Indonesia, so Law No. 27 of 2022 on Personal Data Protection applies to us as well.

If the storage or the third parties on this page change, we update the list and move the date at the top. A change that widens what we collect resets the prompt, so you get asked again rather than carried over on an answer you gave to a different question.