Privacy
Almost nothing is collected.Here is the "almost".
No accounts, no newsletter, no advertising cookies, nothing sold or shared. But since October 2026 this site does count its visits with Google Analytics, and a privacy page that pretends otherwise is worse than no privacy page.
What happens when you visit
Cloudflare serves the pages and writes a short-lived entry in its request log so it can serve the page and block abuse. That is the same as any web host.
Nothing is written into a database, because there is no database. There is no account to create, no form to submit, and nothing to sign up for.
Visit counting
There are two things counting visits, and neither of them is an ad.
The main one is Google Analytics 4, which records which pages are looked at, roughly where visitors are, what device and browser they use, and where they arrived from — in aggregate. It sets two cookies:_ga (two years) and _ga_2XMJWZ8R7M (thirty days). IP addresses are anonymised by Google before anything is stored.
The second is Cloudflare Web Analytics, which runs from the hosting layer. It counts page views, is cookie-free, and never sets an identifier. It is quietly useful because ad blockers tend to kill Google Analytics and leave this one standing.
Neither is used to advertise to you, and there is no advertising on this site to advertise with. To opt out of the Google one,Google Analytics Opt-out will do it, as will most browsers' tracking protection.
Fonts
Until October 2026 the page fonts were loaded fromfonts.googleapis.com, which meant Google's servers saw your IP address and the page you were reading. The three typefaces now live on this server, so that request no longer happens. This is the one thing here that used to leak and now does not.
Elsewhere on the internet
Links to Instagram and TikTok go to those services, and they have their own policies — that is only true once you click one. If a journal entry embeds a video, it is loaded from youtube-nocookie.com, which does not write tracking cookies.
The address on the About page goes to a mailbox I read personally. Nothing is stored anywhere else and nothing is sold or shared.
Why it is written this way
The site was rebuilt in October 2026 and analytics were added later the same day. The point of writing this down is that the list above is short enough to read. If a line ever stops being true, it should be changed here in the same commit that changed the behaviour, not discovered a year later.
One thing already went wrong that way. Cloudflare's own analytics were briefly switched off by a content-security rule that assumed nothing else was running — and because Cloudflare injects its beacon at the edge rather than from the site, nothing in the source code showed it had happened. The counting was quietly dead for a while before it was spotted in a browser console. Worth knowing that a privacy page can be accurate about what the code does while being wrong about what the host does.