Skip to main content

Privacy

This site measures its own audience, without third parties. This page says exactly what is measured, on what basis, how to stop it, and what happens to a message sent through the contact form.

What is measured

Every event this site can record, and every attribute stored alongside it. This list is generated from the measurement code itself and checked against it by an automated test, so it cannot fall out of step with what the site actually does. Each entry shows the name the database uses, so the notice can be matched against the schema rather than taken on trust.

Events

pageview
A page was opened.
engagement
How long a page was actively visible, and how far it was scrolled.
entity_view
How long a specific item on a page was on screen.
outbound
A link leaving the site was clicked. The destination host only, never the address.
custom
A named action, such as sending the contact form.

Attributes stored with an event

path
The path of the page. The address’s query string is not stored, with one exception: the two campaign tags described below, when the link you followed carried them.
country
Country, derived from network information that is not kept.
city
City, derived the same way, and never anything more precise than that.
referrerHost
The site you arrived from. The host name only, never the full address.
utmSource
The utm_source campaign tag, if the link you followed carried one: a short label the author of that link chose to name where it was published, such as a newsletter or an event site. It says something about the link, not about you, and it is absent on most visits.
utmCampaign
The utm_campaign tag from the same link, naming which campaign the link belonged to. Kept under the same conditions: only when the link carried it, and nothing else from the address.
device
Whether the browser reports a phone, a tablet or a desktop.
browser
Browser family, such as Safari or Firefox.
os
Operating system family.
locale
The language this page is published in.
acceptLang
The main language your browser asks for, as two or three letters such as en or fr. Only that much is kept, never the full list of languages and preferences your browser sends.
kind
Which of the events above this row records.
occurredAt
The moment it happened.
lat
An approximate latitude for the city, rounded to about ten kilometres. It exists to place a dot on a world map and is never more precise than that.
lon
The matching longitude, rounded the same way and used for the same map.
entityType
What kind of item was on screen, for example an article.
entityId
Which item it was: the identifier of that article or block.
name
The name of a named action, such as sending the contact form.
target
Where a link leaving the site pointed: the destination host, or simply mailto or tel.
valueMs
A duration in milliseconds: time spent on the page, or time an item was on screen.
scrollPct
How far down the page you had reached: 25, 50, 75 or 100 percent.

Legal basis

Audience measurement is carried out under legitimate interest (GDPR art. 6(1)(f)), within the audience-measurement exemption of ePrivacy article 5(3): nothing is stored on or read from your device for tracking, the data serves audience statistics for this site alone, and it is never combined with another source, sold, or handed to a third party. That is why this site shows no consent banner. None is required for measurement that works this way. Nothing here can single you out either: no cookie is set, no fingerprint is taken, and the identifier the counts are built on is a one-way daily code that cannot be linked to you, to yesterday, or to any other site. Almost everything the owner sees is a count: visitors per day, pages, countries, devices. The one exception is the live activity view described below, which lists the current day visit by visit. It names nobody, and an arrival is shown to the hour rather than the minute.

What is not collected

No cookies. No advertising or marketing use. No cross-site tracking. No fingerprinting: your browser is never asked for its timezone, its fonts or its full language preferences. Your IP address is never stored: it exists in memory long enough to derive a short-lived daily identifier and an approximate location, then goes out of scope. The measurement records nothing beyond the list above. A message you choose to send us is a separate matter, described further down.

Retention

The visitor identifier changes every day, so visits cannot be linked from one day to the next, and the key used to compute it is deleted within days. Individual events are deleted after 25 months. Aggregate daily statistics are kept, because they contain no personal data.

Live activity

The site owner can see the current day at city level, one line per visit. It shows no identity and nothing older than today, a place is never more precise than a city, and an arrival is shown to the hour rather than the minute. There is no way to tell from it who anyone is, whether they had been here before, or whether they came back.

The contact form

The contact form is not part of the measurement and works nothing like it. If you write to us, what you typed is stored so that we can read and answer it: your name, your email address, the subject if you gave one, your message, and which page you sent it from. It is used for that and nothing else, never sold and never passed to an advertiser. It is then deleted automatically, 90 days after you send it, by a job that runs every day: the deletion happens whether or not anybody remembers to ask for it, and it applies to every message the same way, read or unread, filed or not. Ask us sooner and yours goes sooner.

Opt out

This browser can be excluded from measurement entirely. The preference is stored on this device only and applies to this browser alone.

If your browser sends the Global Privacy Control signal, it is honoured automatically: no measurement takes place, regardless of the setting below.

The opt-out control needs JavaScript. With JavaScript disabled the measurement script never runs, so nothing is measured and there is nothing to opt out of.

Send a message

Your name, email address and message are stored so we can answer you, are used for nothing else, and are deleted automatically after 90 days. What happens to your message