What we collect: as close to nothing as a website can get.

The short version

• No analytics scripts, no advertising pixels, no fingerprinting, no third-party requests of any kind on any page.
• No cookies — which is why you've never seen a cookie banner here.
• No accounts, no logins, no profiles.
• No signup forms, no mailing list — the site currently collects no personal data from you at all, deliberately.

You don't have to take that on faith. Open your browser's network panel on any page and watch: nothing loads from another host. That verifiability is the entire point of the site.

What the site stores in your browser

Two things, both in localStorage, both readable only by your own browser. Neither is a cookie and neither is ever sent to us:

• Your light/dark theme choice (pp-theme), so the site doesn't flash the wrong colours on the next page load.
• Your progress on the privacy checklist, so ticked items survive a reload. We can't see it — that's the design. Clearing your browser data erases it.

What our host can see

The site is served by Cloudflare Pages. Like every web server on earth, Cloudflare's edge processes the request your browser makes — your IP address, the page requested, your user agent — in order to deliver the page and to block attacks. That is a technical necessity of HTTP, not a choice we made, and it happens before any of our code runs.

We do not run server-side analytics that build visitor profiles, we do not export or retain request logs, and we have no way to tie a request to a person. Cloudflare processes this data as our hosting provider under their own terms.

The “What You Leak” tool

That page shows you your IP, approximate location, and browser fingerprinting surface. It is a mirror, not a collection point. The /api/whoami endpoint reads what your request already reveals, hands it straight back to you, and forgets it. The response is marked no-store so it is never cached anywhere. Nothing is written to a database, because there is no database.

There is no mailing list

The site has no signup form and collects no email addresses. There is no list, which means there is nothing to leak in a breach, nothing to sell if this site ever changed hands, and nothing to hand over if someone came asking. Not collecting data is the only storage policy that can't be broken.

To follow along, use RSS: your reader fetches the feed directly and we never learn your address or that you subscribed. If a newsletter ever opens, this page will be updated before a single address is accepted.

Links that leave the site

We link out to sources, tools, and gear. Once you click an outbound link, you're on someone else's site under their rules — we have no control over and no visibility into what they do. Two cases are worth naming:

• Affiliate links. Some gear page links are Amazon Associates links. They run through a /go/… path on this domain, open in a new tab, and are marked rel="sponsored nofollow noopener". As an Amazon Associate this site earns from qualifying purchases. If you click one, Amazon knows you arrived from here and may set its own cookies; we receive only anonymous, aggregate commission reporting — never your identity or what you bought. Full detail on the affiliate disclosure page.
• Donations. Not open yet — the support page currently takes no money and links to no payment provider. When that changes it will be a hosted page we link to, never an embedded widget, so no payment script will run here.

Children

This site is written for adults and isn't directed at children. Since we collect no personal data from anyone, there is no children's data here either.

Your rights

Depending on where you live — the EU or UK under the GDPR, California under the CCPA/CPRA, and a growing list of other places — you have rights to access, correct, delete, or port the personal data an organisation holds about you, and to opt out of its sale. Exercising them here is trivial, because we hold no personal data about you — none, for anyone. There is no record to access, correct, export, or delete.

We honour Global Privacy Control signals by default, which is trivially true here because we never sell or share data with anyone. If you want to confirm any of this, email us and ask.

Changes to this policy

If the substance of this policy ever changes — a new provider, a new feature that touches data — we'll update the date at the top and say so in the feed. We won't quietly broaden it.

Contact

Privacy questions, data requests, corrections, or anything else: info@preservingprivacy.com. Real person, real replies.