privacy
What this site measures.
Short version: I count visits because I like watching the numbers go up. Everything runs on hardware I own. Nothing is sold, shared, or handed to an advertiser. There is no cookie banner because there are no cookies.
Who runs this
This site and its analytics are operated by Andrei Lavrenov. The analytics software is Umami, self-hosted at umami.lav.ren on private infrastructure. No analytics company, advertising network or data broker is involved, and no third-party scripts run on these pages.
No cookies, nothing stored on your device
The tracker writes nothing to your browser — no cookies, no localStorage, nosessionStorage, no IndexedDB. The only thing it ever reads is an opt-out flag, and only if you set one yourself with the button below. Requests are sent withcredentials: "omit", so no cookie travels with them either.
That is why you are not being asked to accept anything. The EU cookie rule governs storing or reading data on your device. Nothing is stored, so there is nothing to consent to.
What is collected
- Pages you open: path, page title and the referring URL.
- Browser, operating system, device type, screen size and language.
- Approximate location — country, region and city — derived from your IP address.
- Loading performance: Core Web Vitals (LCP, FCP, CLS, INP, TTFB) and how long the page stayed open.
- Clicks on elements I have explicitly tagged for counting.
- A sampled session recording — see below. Roughly 15% of visits.
Session recordings and heatmaps
About one visit in seven is recorded. A recording is not a video and not your screen: the page structure and its text are re-serialised and replayed, so I can see how a layout was used and where people gave up. Anything you type into a form field is masked before it leaves your browser — the tracker replaces it with asterisks at capture time, so the real value is never transmitted. Heatmaps are built by aggregating clicks and scroll depth across those recordings.
How you are counted without being identified
A visit is identified by a one-way hash of your IP address, browser user-agent, the hostname and the site ID. The hash cannot be reversed back into an IP address, and it is not shared with or reused on any other site, so you are not followed around the web. Your IP address itself is processed to produce that hash and to work out the approximate location above.
I will not pretend this is perfectly anonymous. An IP address is personal data under the GDPR, and a hash derived from one is pseudonymous rather than anonymous. The lawful basis is legitimate interest (Article 6(1)(f)): understanding how my own site is used. You can object at any time — the button below does exactly that, and you can also write to me.
How long it is kept
Analytics data is kept until I delete it. There is no automatic expiry configured.
Your rights
Under the GDPR you may request access to data about you, ask for it to be deleted, or object to it being collected. Given that visits are identified only by an irreversible hash, I usually cannot single out your records from anyone else's — which is itself the point of the design. The reliable remedy is the opt-out below. For anything else, email[email protected].
Opt out
This sets a flag in your browser that the tracker checks before sending anything. It lives on this device and in this browser only, and it is the one thing this site ever stores locally.
Last updated 2026-09-22.