Privacy
Updated 11 Nov 2026
The short version: no cookies, no ads, no tracking scripts, and your IP address isn't stored. The pages, fonts and images all come from this site, so your browser doesn't contact Google or anyone else to show them.
What's counted when you visit
- Page views: the page, your country, the name of the site that sent you (such as reddit.com, not the full link), and a visitor code. The code is a keyed hash of your IP address and browser details. The key is random, is replaced every day and is never saved in the database. So I can count how many people visited on a day. During the day the key is in the server's memory; once each day's key is discarded, nobody, me included, can turn that day's codes back into IP addresses or follow a visitor from one day to the next. Bots aren't counted. Page views are kept for 400 days.
- Simulator runs: the mix, the period and the settings you chose, and your country. Nothing else about you. These are kept for 400 days.
- Errors: if a page breaks in your browser, it sends the error message and the page's address, so I can fix it. These are kept for 90 days.
The web server keeps no access logs of visitors.
Backups
The server's database is backed up every night, and the newest 14 backups are kept. DigitalOcean also keeps weekly copies of the whole server for about four weeks. So anything deleted, such as a contact note, can still exist in a backup for up to four weeks before it's gone for good.
The contact form
If you send a note, your name, email address and message are stored on the server and reach me in a daily email. I use them only to reply. Notes are kept until I delete them; to have yours deleted, ask through the contact form.
Who else handles data
- Cloudflare delivers the site. Like any network provider, it sees your IP address on the way through, and it tells the site which country you're in. See Cloudflare's privacy policy.
- DigitalOcean hosts the server, in New York.
- Brevo delivers the daily email that carries contact-form notes to me.
- Links to Substack, LinkedIn and GitHub take you to those sites, which have their own privacy policies.
Cookies
The site sets no cookies for visitors, so there is nothing to accept. The only cookie is for my own private area: Cloudflare sets it when I sign in.
Questions? Use the contact form.