cunningorb

Privacy Policy

Last updated

cunningorb.com is a static website. There are no user accounts, no comments, no shopping cart and no third-party tracking scripts. It does count visits, and the section below describes exactly how, because the method is the only reason that claim and the counting can both be true.

What this site does not do

  • It does not set cookies, and writes nothing to your device.
  • It does not use Google Analytics, advertising, or any third-party tracker.
  • It does not have accounts, logins or a newsletter.
  • It does not accept comments.
  • It does not sell anything, and does not process payments.
  • It does not embed social widgets or Gravatar.

Fonts are the one third-party request: they are served by Google Fonts, which receives the request as a normal web request.

Analytics

Visits are counted by a small collector I wrote and run myself, on my own Cloudflare account. No vendor holds the data and there is nothing to consent to, because nothing identifying is collected in the first place.

Each pageview records the page path, the referring site if you came from one, any campaign tags on the link, your country, and whether you are on desktop, mobile or tablet. Clicks on the email, GitHub and LinkedIn links are counted too, along with which page they were on.

What makes that countable without tracking anyone:

  • No cookie and no stored identifier. Nothing is written to your browser.
  • Your IP address is never stored. It is an input to a hash and is then discarded.
  • The visitor hash rotates every day. It is a salted hash of the date, your IP and your browser’s user agent string. The same person on two days produces two unrelated values, so following anyone across days is impossible by construction rather than by promise.
  • Query strings are dropped. Only campaign tags are read; the rest of the query string is never stored, so a stray parameter cannot leak into the data.
  • Internal navigation is not counted as a referral. Links from one page here to another are discarded.

The result is counts, not people. There is no session to reconstruct and no profile to build, and the dashboard I read it on runs on my own machine and is not reachable from the internet.

It does not honour Do Not Track, and that is deliberate. DNT asks not to be tracked, and this collector cannot track anyone: no cookie, no stored IP, and a hash that rotates daily. Honouring it would buy no privacy the design does not already guarantee, while quietly deleting a slice of the audience, since Brave sets DNT and so does Firefox in strict mode. Plausible and Fathom skip it for the same reason.

Server logs

The site is hosted on Render, which records requests the way any web server does: an IP address, a timestamp, the page requested, the referring page and the browser’s user agent. Those logs are Render’s, exist to keep the service running and to investigate abuse, and are not used to build a profile of anyone.

If you email me

The email address on this site goes to a normal mailbox. If you write to me, I keep your message and your address for as long as the conversation is useful, the same as any other email. I do not add you to a mailing list.

Pages here link out to places like GitHub, LinkedIn and Wikipedia. Those sites set their own cookies and have their own privacy policies. This one has no control over them.

Changes

If the site starts collecting something it does not collect today, this page gets updated before that goes live.

Contact

Questions about any of the above: micahmangin@gmail.com