This site collects as little about visitors as it can. Here’s everything that happens.
What gets collected from you
When you comment
- Your name and email (required — name is shown publicly, email is not)
- Your website URL if you provide one (shown publicly)
- Your comment text
- Your IP address and browser user-agent (for spam detection)
Spam filtering — Akismet
Comment data including your IP and email is sent to Akismet (operated by Automattic) for spam analysis. See automattic.com/privacy for what they do with it.
Avatars — Gravatar
A hashed version of your email is sent to Gravatar (also Automattic) to fetch a profile picture if you’ve registered one there. If you don’t have a Gravatar, nothing happens and no picture is shown.
Cookies
Visitors get no cookies unless they tick “Save my name, email, website” on the comment form — that sets a 1-year convenience cookie locally so you don’t have to re-fill on future comments. Beyond that, login cookies are only set for the site owner.
Visitor counter
The counter shown in the status line tracks total visits, dedup’d by a salted hash of your IP that’s discarded after 30 minutes. The IP itself is never stored long-term for counting purposes — the running total is just an integer.
Server logs
The web server (Apache) keeps standard access logs — IP, timestamp, requested URL, user-agent — rotated by the system on its default schedule. These don’t go to any third party.
Security — Wordfence
Wordfence (a security plugin) monitors traffic and may briefly log IPs that look like attack attempts in order to block them. Suspicious-traffic data stays on this server.
What does NOT happen
- No Google Analytics, Facebook Pixel, or any other behavioral tracking
- No third-party advertising or affiliate tracking
- No newsletter, email list, or marketing communications
- No selling, sharing, or use of your data outside what’s listed above
- No account registration is available; only the site owner has a login
Embedded content (YouTube / Vimeo)
If you click a video on a project page, an embedded YouTube or Vimeo player loads. Once it does, YouTube or Vimeo can see your IP and may set their own cookies, exactly as if you’d visited their site directly. They’re not part of this site’s data handling, and their own privacy policies apply.
Data retention
- Comments and their metadata: kept indefinitely (so I can recognize and auto-approve repeat commenters)
- Server access logs: rotated by the system (~30 days)
- Wordfence threat data: short-lived (typically days, not months)
Your rights
If you’ve commented and want a copy of the data this site holds about you, or want it deleted, email (email) (or leave a comment on this page) and I’ll handle it. WordPress also has built-in data export and erasure tools available on request.
Contact
Email: (email). Or leave a comment on this page — I read those manually.