Sign in Subscribe

Privacy Policy

Last updated: 2026-05-15

This is a personal blog. The short version: I don't sell your data, I don't ship it to ad networks, and the only analytics I run are self-hosted on my own infrastructure. The longer version is below.

What I collect

Pageviews (cookieless, on by default)

Every page load fires a small beacon to my self-hosted Umami instance. It records the URL, the referrer, the country (via Cloudflare), and the device class (desktop / mobile / tablet). It does not set any cookies, doesn't fingerprint your browser, and doesn't track you across sessions.

Session replays (opt-in for EU/UK/EEA, opt-out elsewhere)

Optionally, the same Umami instance can record an anonymized replay of how you move through a page — scroll, clicks, hover. This helps me debug layout problems and dead-end navigation. Form inputs and passwords are masked at the source. I never see what you type. Replays are stored for 30 days and then deleted.

If you're in the EU, UK, or EEA, replays are off until you explicitly opt in via the Cookie Settings link in the footer. Everywhere else, they're on by default and you can opt out via the same link.

Why

I write for a small audience. The analytics tell me which posts get read and which fall flat. The replays tell me which pages render badly on phones. That's it.

Retention

  • Pageview data: 12 months, then aggregated and the raw rows are dropped.
  • Session replays: 30 days, hard delete.

What I don't do

  • No third-party trackers. No Google Analytics. No Facebook pixel. No ad networks.
  • No data sharing. None of this leaves my infrastructure.
  • No selling, no licensing, no "data partnerships."

Your rights

You can opt out of session replays via the Cookie Settings link at the bottom of every page. If you want me to delete any pageview history I might still have for your IP / session, email [email protected] and I'll handle it manually.

Contact

Questions about any of this: [email protected].

What's collected (updated May 2026)

Anonymous pageview data: page URL, referrer, browser, OS, device type, screen size, country (and city/region where available, accurate to metro level).

Per-post metadata attached to each pageview: which author, which series, which tags, post age, post length category. No personal data, just describes the content you viewed.

Engagement events (anonymous): scroll depth (25/50/75/100%), outbound link clicks (with destination domain), internal link clicks, time on page (30s/60s/120s/300s beacons), share button clicks, code copy events on technical posts, image clicks.

Session replay (opt-in EU/UK, opt-out elsewhere): clicks, scrolls, form interactions with all input fields masked. Recordings expire after 30 days.

Nothing is sold or shared. Everything stays on infrastructure I (Sid) operate.