Last updated: May 7, 2026.
This page explains what information we collect when you visit this site, why we collect it, and what we do with it. We aim to keep it short and honest. If you have questions, please use our contact page.
What we collect
- Site analytics (automatic). As you browse, we record the pages you visit, the website that referred you (if any), and the date - all server-side, in our own database. We do not set tracking cookies, run third-party trackers, or share this data with anyone. To count distinct visitors per day without storing your identity, we generate a one-way SHA-256 hash of your IP address, your browser's User-Agent string, the current date, and a private application key. This hash rotates daily, cannot be reversed, and cannot be linked to you across days. We never store raw IP addresses from page views. Site administrators can disable unique-visitor counting entirely from the dashboard.
- Form submissions. When you submit a contact form, support form, or any other form on this site, we may store the fields you fill in along with your IP address and the date. If the form is configured to email a notification, the contents of your submission are also sent to the operator's inbox.
- On-site search queries. If you use the search field on this site, we log the search term, the source of the search (e.g. blog), how many results came back, and the date. This helps us identify content gaps. Search queries are not linked to your identity.
- AI chat conversations. If you use the AI chat assistant, we store the messages you send and the assistant's replies on our servers so we can maintain the conversation and improve the service. The conversation is tied to your existing session - we do not set any new cookies for it. Conversations are automatically deleted after a retention period set by the site operator.
What we do NOT collect
- We do not set tracking cookies. (Standard session and CSRF cookies are used for admin login and form protection only - they aren't used to track you.)
- We do not run third-party advertising or analytics trackers. There is no Google Analytics, no AdSense, no Facebook Pixel, no DoubleClick, no behavioural-advertising network on this site.
- We do not fingerprint your browser, screen, hardware, fonts, or plugins.
- We do not collect or use geolocation data.
- We do not sell, rent, trade, or transfer your information to outside parties for marketing purposes.
Why we collect it
- Analytics - to understand which content is useful, where visitors come from, and which pages need work.
- Form submissions - to respond to your inquiry, fulfill your request, or follow up.
- Search queries - to identify content gaps and improve the site.
How long we keep it
- Page views, search queries, and form-conversion records: kept for 365 days by default, then automatically deleted. Site administrators can change this retention period.
- Visitor dedup hashes: kept for 7 days, then automatically deleted.
- Realtime activity log: the last 30 minutes of page views are stored to power a live dashboard. Older entries are auto-deleted every few minutes.
- Form submissions: kept until a site administrator deletes them.
Cookies
This site uses only strictly-necessary cookies:
- A session cookie that keeps admins logged in (set only after a successful admin login).
- A CSRF token cookie that protects form submissions from cross-site attack.
These cookies are required for basic site function, are not used for advertising or tracking, and expire shortly after you stop using the site.
Third-party services
The following third-party services receive data only when their corresponding feature is used:
- Email delivery - when you submit a form that's configured to send a notification, the email-delivery provider processes the outgoing notification email.
- AI content generation (admin-only). If site administrators use the optional AI tools to draft or translate content, the prompts and any reference images they upload are sent to the configured AI provider (Anthropic, OpenAI, Google, Stability AI, fal.ai, or DeepSeek). This feature does not run on public visits and does not transmit visitor data - only content the admin chooses to send.
- AI chat assistant. When you chat with the optional AI assistant, your messages are sent to the configured AI provider (such as Anthropic, OpenAI, Google, or DeepSeek) to generate a response. Only your chat messages and relevant published site content are sent - no other visitor data.
We do not currently use Google Analytics, advertising networks, or social-media trackers on this site.
Do Not Track and Global Privacy Control
This site honours the Do Not Track (DNT: 1) and Global Privacy Control (Sec-GPC: 1) request headers. If your browser sends either signal, we skip recording your visit in the analytics database entirely. (We can only honour a signal we receive - if your browser doesn't send DNT or GPC, we'll record the visit using the anonymous methodology described above.)
Children's privacy
We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us so we can delete it.
Your rights
Because we don't store raw IP addresses, tracking cookies, or persistent identifiers, the analytics database does not contain personal information we can associate with a specific individual. For form submissions you've sent us, you can email us to:
- Request a copy of what we have on file.
- Ask us to correct or update your information.
- Ask us to delete it.
We'll respond within a reasonable time.
Data breach
If a data breach affects your information, we will notify you by email within 7 business days of becoming aware of the breach.
Changes to this policy
If we update this policy, we'll change the "Last updated" date at the top.
Contact
If you have questions about this privacy policy or the data we hold, please use our contact page.