privacy // small data, plainly explained

This is a personal website, not a growth funnel wearing a flower crown. It has no advertising network, no cookie banner, and no third-party analytics account. It uses a self-hosted Umami instance to answer one deliberately boring question: roughly how many people visit?

What is collected#

For a page view, Umami receives the page path, the referring site’s origin, browser, operating system, device type, screen size, language, and an approximate location such as country, region, or city. Query strings and URL fragments are removed before analytics loads, so marketing parameters such as utm_source and Facebook’s link decoration are not retained.

Umami uses the IP address to estimate location and to calculate an anonymous session hash from the IP address, user agent, website ID, and a rotating salt. The IP address itself is not stored. No custom distinct ID is assigned, and this site never calls Umami’s identify function.

What is not collected#

This site does not use analytics cookies, advertising pixels, fingerprinting, custom events, form tracking, revenue attribution, heatmaps, or cross-site tracking. It does not build audience segments, funnels, journeys, cohorts, retention reports, or marketing profiles.

Session recording is disabled. The recorder script is not loaded, so text, keystrokes, pointer movement, clicks, scrolling, and visual replays are not captured. The analytics database is self-hosted and its data is neither sold nor shared with advertisers or other analytics providers.

Retention#

There is currently no automatic deletion schedule configured. Self-hosted Umami retains page-view records until they are manually deleted. That is less elegant than a suspiciously specific legal-fiction number, but it is the honest answer and therefore the useful one.

Browser privacy signals and opting out#

The analytics loader respects both Do Not Track and Global Privacy Control. When either signal is enabled, the Umami script is not requested at all. The privacy page itself is never measured.

You can also opt out on this browser with the control below. It stores only umami.disabled=1 in local storage; that value is a preference, not an identifier. Clearing site data clears the preference, so you may need to opt out again afterward.

Questions or corrections are welcome over Matrix or Mastodon. Email stays off the rendered page because spambots have already received enough enrichment opportunities.

Last updated: 15 July 2026.