Privacy policy

Last updated November 3, 2026. This site is run by Carter Cole. Questions or requests: carter@cartercole.com.

Two levels of measurement

Anonymous (always on). Each page view adds one to a daily counter for the page, the referring site, and your device size (mobile, tablet or desktop). No cookie is set and nothing identifies you. Visitors sending a Do Not Track or Global Privacy Control signal are not counted.

Full (only if you click Accept). If you accept on the banner, I also collect:

• a random visitor ID stored in a cookie named vid (lasts up to 400 days, renewed when you visit);
• a device fingerprint: a hash built from your browser, language, time zone, screen, graphics and similar settings, used to recognise a returning device;
• your IP address and browser (user agent) for each visit, and the country and network (ASN) looked up from the IP using IPinfo's free database, which is stored on my server, so your IP is not sent to IPinfo;
• the pages you view, where you came from, and a recording of your session: mouse movement, clicks, scrolling and page changes. Text you type into form fields is masked and never captured.

Choosing "Anonymous only" or sending Do Not Track or Global Privacy Control means none of the second list is collected. Your choice is remembered in a cookie named consent (one year). You can change it at any time with "Privacy choices" in the footer.

Why

To understand what is read, find problems, and spot abusive traffic. I don't sell the data, use it for advertising, or share it with anyone for their own purposes.

Legal bases

Anonymous counting relies on legitimate interests. The cookie, fingerprint, IP logging and session recording rely on your consent, which you can withdraw whenever you like. Withdrawing doesn't affect what was collected before.

Accounts

If you sign in with Google, Microsoft, Apple, Slack or GitHub, I receive your name, and where provided your email address and profile picture. They are kept in a signed session cookie (session, 30 days) and are not stored in a database. A second cookie, signed_in, only tells the page to check whether you are signed in. Signing out removes both.

How long I keep it

• Anonymous counters: 400 days.
• Visit records (IP, user agent, IDs): 400 days.
• Session recordings: 30 days.

Who handles it

The site and its data run on Amazon Web Services in the United States (Lambda, CloudFront, DynamoDB). Sign-in goes through the provider you choose. No other third parties receive visitor data.

Your rights

You can ask to see, correct or delete what I hold about you, object to processing, or complain to your local data protection authority. Because records are keyed by cookie, I need your visitor ID (the value of the vid cookie, which your browser can show you) or your IP address to find them. Email the address above; I'll respond within 30 days. California residents: I do not sell or share personal information, and I honour Global Privacy Control.

Children

This site is not directed at children under 13 and I don't knowingly collect their data.

Changes

If this policy changes in a way that matters, I'll update the date above and, if it means collecting more, ask for your consent again.