Privacy

When you browse

Two measurement tools load on every page: Vercel Web Analytics and PostHog.

PostHog starts after the page has painted and sends one pageview event carrying the site name and its register. Click autocapture is off, session recording is off, surveys are off, and a person profile is created only for a signed-in user, which visitors are not. PostHog and Vercel receive the IP address and browser type that come with the request, as any internet request carries.

PostHog stores a random identifier in your browser, in a cookie and in local storage, so repeat visits count as one visitor. The site sets no other visitor cookie; the one remaining cookie is set when signing in to the editing panel, which is closed to visitors.

Contact and correction forms

What you typed is stored: the message, the site path it refers to if given, and your name and email if you entered them. Name and email are optional; the message alone is enough. A copy of the message is emailed to the operations address.

The message enters an internal review queue. When a correction is applied, the corrections log shows its date, the page path and the correction note, without your name or email.

Anti-spam

Before a form is accepted, your browser solves a signed computational challenge, the fill time is measured, and a hidden field only a script fills is checked. Where Cloudflare Turnstile keys are configured, Turnstile replaces the computational challenge, and the IP address then reaches Cloudflare for that check.

Where the data is stored

Rows sit in a Postgres database on Neon, uploaded images in Vercel Blob, and the sites run on Vercel.

What does not happen here

No advertising network and no third-party ad trackers. No sale of data and no sharing with data brokers. No session replay and no click maps. No visitor accounts.

Deleting what you sent

A message, correction request or review you sent can be deleted: ask on the contact page and say what you sent and roughly when.