Privacy
This site measures its own audience, without third parties. This page says exactly what is measured, on what basis, how to stop it, and what happens to a message sent through the contact form.
What is measured
Every event this site can record, and every attribute stored alongside it. This list is generated from the measurement code itself and checked against it by an automated test, so it cannot fall out of step with what the site actually does. Each entry shows the name the database uses, so the notice can be matched against the schema rather than taken on trust.
Events
-
pageview - A page was opened.
-
engagement - How long a page was actively visible, and how far it was scrolled.
-
entity_view - How long a specific item on a page was on screen.
-
outbound - A link leaving the site was clicked. The destination host only, never the address.
-
custom - A named action, such as sending the contact form.
Attributes stored with an event
-
path - The path of the page. The address’s query string is not stored, with one exception: the two campaign tags described below, when the link you followed carried them.
-
country - Country, derived from network information that is not kept.
-
city - City, derived the same way, and never anything more precise than that.
-
referrerHost - The site you arrived from. The host name only, never the full address.
-
utmSource - The utm_source campaign tag, if the link you followed carried one: a short label the author of that link chose to name where it was published, such as a newsletter or an event site. It says something about the link, not about you, and it is absent on most visits.
-
utmCampaign - The utm_campaign tag from the same link, naming which campaign the link belonged to. Kept under the same conditions: only when the link carried it, and nothing else from the address.
-
device - Whether the browser reports a phone, a tablet or a desktop.
-
browser - Browser family, such as Safari or Firefox.
-
os - Operating system family.
-
locale - The language this page is published in.
-
acceptLang - The main language your browser asks for, as two or three letters such as en or fr. Only that much is kept, never the full list of languages and preferences your browser sends.
-
kind - Which of the events above this row records.
-
occurredAt - The moment it happened.
-
lat - An approximate latitude for the city, rounded to about ten kilometres. It exists to place a dot on a world map and is never more precise than that.
-
lon - The matching longitude, rounded the same way and used for the same map.
-
entityType - What kind of item was on screen, for example an article.
-
entityId - Which item it was: the identifier of that article or block.
-
name - The name of a named action, such as sending the contact form.
-
target - Where a link leaving the site pointed: the destination host, or simply mailto or tel.
-
valueMs - A duration in milliseconds: time spent on the page, or time an item was on screen.
-
scrollPct - How far down the page you had reached: 25, 50, 75 or 100 percent.
Legal basis
Audience measurement is carried out under legitimate interest (GDPR art. 6(1)(f)), within the audience-measurement exemption of ePrivacy article 5(3): nothing is stored on or read from your device for tracking, the data serves audience statistics for this site alone, and it is never combined with another source, sold, or handed to a third party. That is why this site shows no consent banner. None is required for measurement that works this way. Nothing here can single you out either: no cookie is set, no fingerprint is taken, and the identifier the counts are built on is a one-way daily code that cannot be linked to you, to yesterday, or to any other site. Almost everything the owner sees is a count: visitors per day, pages, countries, devices. The one exception is the live activity view described below, which lists the current day visit by visit. It names nobody, and an arrival is shown to the hour rather than the minute.
What is not collected
No cookies. No advertising or marketing use. No cross-site tracking. No fingerprinting: your browser is never asked for its timezone, its fonts or its full language preferences. Your IP address is never stored: it exists in memory long enough to derive a short-lived daily identifier and an approximate location, then goes out of scope. The measurement records nothing beyond the list above. A message you choose to send us is a separate matter, described further down.
Retention
The visitor identifier changes every day, so visits cannot be linked from one day to the next, and the key used to compute it is deleted within days. Individual events are deleted after 25 months. Aggregate daily statistics are kept, because they contain no personal data.
Live activity
The site owner can see the current day at city level, one line per visit. It shows no identity and nothing older than today, a place is never more precise than a city, and an arrival is shown to the hour rather than the minute. There is no way to tell from it who anyone is, whether they had been here before, or whether they came back.
The contact form
The contact form is not part of the measurement and works nothing like it. If you write to us, what you typed is stored so that we can read and answer it: your name, your email address, the subject if you gave one, your message, and which page you sent it from. It is used for that and nothing else, never sold and never passed to an advertiser. It is then deleted automatically, 90 days after you send it, by a job that runs every day: the deletion happens whether or not anybody remembers to ask for it, and it applies to every message the same way, read or unread, filed or not. Ask us sooner and yours goes sooner.
Opt out
This browser can be excluded from measurement entirely. The preference is stored on this device only and applies to this browser alone.
If your browser sends the Global Privacy Control signal, it is honoured automatically: no measurement takes place, regardless of the setting below.
The opt-out control needs JavaScript. With JavaScript disabled the measurement script never runs, so nothing is measured and there is nothing to opt out of.