The short version: this site counts visits so I know whether it is working. It sets two first-party cookies, stores no raw IP addresses, does no cross-site tracking and no fingerprinting, and sells nothing to anyone.

Cookies this site sets

vi_vid

A random identifier. About 400 days. Nothing is encoded inside it.

vi_sid

A session marker. 30 minutes, sliding — a longer gap starts a new session.

Both are Secure, HttpOnly and SameSite=Lax — scripts in the browser cannot read them, and they are never sent to other sites.

What gets recorded

• Which pages were opened, when, and in what order
• Where you arrived from (the referrer)
• Coarse location and network derived from your IP — country or region, and network operator
• Browser and device type
• Whether the request looks automated

Your IP address is not stored. It is used transiently to derive the coarse location above, then discarded.

Why

To see which pages people actually read, to tell real visitors from bots and scanners, and to know whether a link I shared reached anyone. If you contact me and I connect that to a visit, your email is stored as a one-way hash, never in the clear.

Third parties

Cloudflare Web Analytics for aggregate figures. Product analytics and session replay via PostHog load only if you accept them — off by default. Fonts are served by Google Fonts.

How long

Raw edge events are kept for about 90 days, sampled. Sessions, visitor records and curated events are pruned on a set window. AI-generated summaries are produced on demand and never stored.

Deleting your data

Email me and I will delete every row tied to your visitor id. No account, no forms. [email protected]

← Back to the site