~/privacy

Privacy

The short version: this site collects almost nothing, and what it does collect you hand over on purpose.

What I collect

If you subscribe — your email address, and nothing else. It is held in my mailing list at Resend and used to tell me you signed up and to send you new posts. It is deliberately not stored in this site's repository, which is public. No name, no profile, no tracking attached to it.

If you comment — nothing reaches me directly. Comments run on GitHub Discussions, so you sign in with your GitHub account and your comment lives in this site's repository, publicly, under your GitHub username. I never see your email address, and there is nothing for me to store.

That is the whole list.

What I don't collect

No advertising, no tracking pixels, no profiling, and nothing that follows you anywhere else.

I do count page views, through Vercel Web Analytics. It sets no cookie and stores no personal data: visitors are identified by a hash of the request that resets every day, so the same person cannot be recognised tomorrow, or on any other site. What I see is aggregate — which pages get read, roughly where in the world from, which browsers. Never who.

This site sets no cookies for visitors. The only cookie it issues is a sign-in session for me, on admin pages you cannot reach. If you sign in to comment, that is GitHub's session, under GitHub's terms rather than mine.

Fonts are served from this site rather than fetched from Google, so opening a page here does not tell anyone else that you did.

Searching the blog happens in your browser. The query goes into the address bar, not to a server.

Who else touches it

Resend holds the mailing list and delivers its email, so a subscription address lives with them.

giscus and GitHub power the comments. The comment box is an embedded frame served by giscus.app, and posting through it means authorising the giscus app against your GitHub account. Loading a post with comments therefore contacts giscus.app. Neither the frame nor I set any tracking cookie, and giscus states that it has no tracking and no ads.

Vercel hosts the site, keeps ordinary server logs — IP address, page requested, timestamp — as every web server does, and runs the analytics described above.

OpenStreetMap and CARTO serve the map tiles behind the location on the About page. Opening that map requests images from CARTO's servers; nothing about you is sent beyond what any image request carries, and the map is not loaded at all unless you ask for it.

Nothing is sold, and nothing is shared beyond those.

Having it removed

Email contact@sudi.dev and ask. I will delete your subscription, your comment, or both. You do not need to give a reason, and I will not ask for one.

Changes

Last updated 23 August 2026. If what I collect ever changes, this page changes with it and that date moves.