Privacy

In short: as little as possible.

This page is a skeleton. Before the site opens accounts to anyone else, it has to say which data is processed, what for, for how long, and who else gets to see it. The technical basis is in docs/PRIVACY.md in the repository.

What is stored right now, without an account

Reading changes nothing: no analytics, no tracking, no cookie until you do something that needs one. Two things can create one, and both are your decision.

• Voting in a poll stores your answer and a random number in a cookie, so the same browser cannot vote twice and can take its vote back. The number says nothing about you and is not connected to anything else.
• Writing a comment stores exactly what you typed — the name you chose and the text — plus a random number in a cookie so your browser can delete its own comment again. The name is whatever you want it to be; nothing checks it and nothing links it to you. What you write is public, because that is what a comment is. You can delete it, and so can I.
• Turning on notifications stores what your browser hands out for the purpose: an address at Google, Apple, Mozilla or Microsoft, and two keys that let them forward a message they cannot read. It identifies a browser, not a person, and no email address is involved at any point. Turning it off again deletes the entry.

When a page reaches somewhere else

A chapter can carry a music tip or a video. Nothing of either is loaded while you read: the page shows a box with a ♪ or a still picture from my own storage, and that is all. Press it, and a player from Spotify or YouTube opens inside the page — and from that moment those companies see a visit like any other, under their rules and not mine. Measured on this site: pressing play on a Spotify tip also sends error reports from inside their player to a service of theirs. I cannot change what happens inside that frame; what I can do is not start it for you.

Everything else stays here. No fonts from elsewhere, no scripts from elsewhere, no map tiles, no analytics. A page you have not pressed anything on talks to nobody but this server.

What is stored once accounts exist

• a username you chose — no real name needed
• the public key of your passkey — no password
• access rights and a few interests, for the navigation
• active sessions, one per device

What is deliberately not stored

• email address, phone number, legal name, date of birth
• location history
• onboarding answers beyond what they were evaluated for
• anything covered by Article 9 GDPR