Privacy

The short version

• Google Analytics is off until you click Accept on the banner. If you accept, it counts which pages you view and which links to other sites you click, and it sets two cookies to do that.
• The web server keeps a basic log of each request, including your IP address.
• I use this only to see how the site is used. I don't sell it.
• You can change your answer at any time with "Cookie settings" at the bottom of every page (see Your choices).

What the web server records

Like almost every website, the server writes a line to its log for each request. The line holds:

• your IP address
• the date and time
• the page or file requested, and whether it loaded
• the page that linked you here (the "referrer"), if your browser sends it
• your browser's user-agent string, which names the browser and operating system

I use these logs to keep the site running and to spot errors or abuse.

The site itself sets no cookies. When you answer the analytics banner, your browser saves the answer (analytics-consent, in local storage) so the site doesn't ask again. It stays on your device and is never sent to the server.

What Google Analytics records

Nothing is sent to Google until you click Accept. Before that, the page doesn't even load Google's script. Once you accept, each page loads the Google Analytics script from googletagmanager.com, and it sends Google:

• Page views: the address and title of the page, and the page you came from.
• Outbound clicks: the address of a link to another site when you click it, such as my GitHub profile.
• Device and browser details: device type, operating system, browser, screen size and language.
• Approximate location: country, region and city, which Google works out from your IP address. Google says Google Analytics 4 does not log or store IP addresses.
• Timing: when you visited and how long you stayed.

To recognize repeat visits, it stores a random ID in two cookies on this site: _ga and _ga_RDD033RLK7. By default they last up to two years, unless you delete them.

The site never sends Google your name or email. There are no forms, so there's nothing like that to send. I can't tell from Analytics who you are.

Why

I use the reports to see how many people visit, which sections they read, and whether they follow links like GitHub. That tells me whether the site is doing its job. I don't use the data for advertising.

Who receives it

• Me. I read the Analytics reports and the server logs.
• Google, only if you accept analytics. Google runs Google Analytics and processes its data on Google's servers, which may be outside your country. Its use is covered by How Google uses information from sites that use its services.
• Railway hosts the site and its database, so the server logs are stored on Railway's infrastructure.
• Cloudflare answers DNS lookups for kenwinsor.xyz. If you visit www.kenwinsor.xyz, Cloudflare receives that request and redirects it to kenwinsor.xyz. Visits to kenwinsor.xyz itself don't pass through Cloudflare.

I don't sell or share this data with anyone else. If you follow a link to another site, that site's own privacy policy applies.

How long it's kept

• Google Analytics: detailed visit data is deleted after at most 14 months. Summary reports built from it, such as monthly visitor counts, may be kept longer.
• Server logs: kept by Railway for the limited period its plan allows, then deleted. I don't export or keep copies.

Your choices

These are the choices you actually have:

• Accept or reject on the banner. Analytics stays off unless you click Accept. Rejecting, or closing the page without answering, keeps it off. Accepting only allows analytics. The settings Google uses for ads stay set to "denied".
• Change your mind later. Use "Cookie settings" at the bottom of any page. If you switch to Reject, the site deletes the _ga cookies and reloads the page without Google's script. Data Google already received isn't deleted by this; see "Ask me" below.
• Block it in your browser. Block cookies for kenwinsor.xyz, or use a content blocker that blocks googletagmanager.com. The site works the same without Analytics.
• Use Google's opt-out add-on. The Google Analytics Opt-out Browser Add-on stops Analytics on every site, on desktop browsers.
• Delete the cookies. Clearing _ga and _ga_RDD033RLK7 resets the random ID, so later visits aren't linked to earlier ones.
• Ask me. If you send me the value of your _ga cookie, I can ask Google to delete the data tied to it. Email me at ken@kenwinsor.xyz.

This site doesn't read Do Not Track or Global Privacy Control signals. Analytics stays off unless you accept on the banner. With JavaScript turned off, the banner never appears and analytics never loads. The server logs are recorded for every request, and visitors can't turn them off.

Changes

If what the site collects changes, I'll update this page and the date at the top.