Privacy

Nothing identifying is stored. No advertising pixel, no third-party fonts or embeds — the fonts are served from this domain. Pages are counted, and the next section says exactly how; that count sets no cookie and reads nothing from your browser, so there is still no consent banner to click.

Page views are measured with Vercel Web Analytics. The counting script is served from this domain rather than from a third party, and it stores nothing at all on your device — no cookie, no local storage, nothing to clear. Each view records the page, where you arrived from, and the coarse country, browser, and device type your request already carries. To count the same reader twice in a day without knowing who they are, Vercel derives a one-way hash from the request — the IP address, the browser's user-agent string, and a salt that changes daily. The address itself is never stored, and because the salt changes, tomorrow the same reader is an unrelated number. There is no profile, no cross-site identity, and none of it is sold or shared for advertising. The admin pages are excluded from the count, so our own visits do not appear in it.

Taking part stores a random identifier in your browser's local storage. It is not linked to your name, email, or account, and it is created only when you first submit an entry — reading the site never creates one. Clearing site data removes it permanently and cannot be undone by us, because we have no way to connect the old identifier to you.

Accounts are optional and exist to carry results across devices and, only with separate opt-in consent, send a monthly personal digest. Sign-in is by one-time email link; we never set, receive, or store a password. An account links the anonymous device identifiers you use; it does not make them public.

Anonymised entry data is published so anyone can check the analysis. Published files carry per-export pseudonyms rather than participant identifiers, and never contain IP hashes, email addresses, or timestamps precise enough to single someone out.

Hosting and page-view measurement are Vercel; the database and authentication are Supabase. Both act as processors on our instructions. No data is sold, shared for advertising, or used to build profiles.

Account holders can download their private record or permanently delete the account and every linked entry from the personal-record page. You can also ask what is held, request deletion, or request a copy by writing to the contact address. Clearing site data removes the local identifier; because unlinked participation is anonymous, we may need that identifier to act on a request.

Participation data is processed on the basis of consent, given by choosing to submit an entry. Abuse-prevention hashes and the cookieless page count rest on legitimate interest — one in keeping a public register usable, the other in knowing which research is actually read. Because that count neither stores nor reads anything on your device, the rule that makes a cookie banner necessary does not reach it. This page describes actual behaviour and is not legal advice.