Privacy

last updated: 2026-06-08 · plain English, no fine print

This site is run by one engineer for a personal services brand. Below is exactly what the site collects from visitors and form submitters, and what it doesn't.

What we collect

Page-view analytics (first-party). When you load a page, we record: the URL path you visited, the referring URL (if any), your browser family, your accept-language header, and the date. Your IP address is never stored in its original form — only an SHA-256 hash of IP + a daily-rotating salt. The salt rotates each calendar day, so the same IP produces different hashes on different days. Cross-day visitor tracking on our side is mathematically impossible.

Yandex.Metrika (third-party). This site uses Yandex.Metrika (counter ID 109713756) for aggregated traffic analytics: pageviews, browser/device family, country, click-map, and link clicks. Yandex sets its own cookies and applies its own privacy practices — see Yandex Privacy Policy. To opt out, install the Yandex.Metrika opt-out add-on, use a content blocker, or block mc.yandex.ru in your browser.

Google Analytics 4 (third-party). This site uses Google Analytics (measurement ID G-KSGGS46D4P) for aggregated traffic analytics. Google sets its own cookies and applies its own privacy practices — see Google Privacy Policy. To opt out, install the Google Analytics Opt-out add-on, use a content blocker, or block googletagmanager.com and google-analytics.com in your browser.

Contact form. When you submit the form, we store the name you typed, the contact channel you provided (email or @handle), your message, the submission timestamp, and the same hashed-IP described above. The data is appended to a text log on the server. It is used to reply to you — and for no other purpose.

What we don't collect

• No other third-party trackers (no Meta Pixel, no ad networks, no remarketing pixels).
• No first-party cookies beyond a PHP session cookie that is never read or used.
• No precise geolocation, no email scraping, no browser fingerprinting on our side.
• No advertising IDs, no remarketing, no data sold to anyone.

Where the data lives

Bare-metal server with full encryption at rest. Only the site owner has access.

Third-party services on this page

• Yandex.Metrika — see the section above.
• Google Analytics 4 — see the section above.
• Google Fonts — used to load the JetBrains Mono and Inter typefaces. Google says no cookies are set when fonts are served via the CSS API.
• Telegram — only if you click the @ITUnfallen link.

Data deletion and contact

To request deletion of contact-form data, submit the same form mentioning «delete my data» with the original contact you used. Done within 7 days. The hashed-IP analytics is not tied to your identity and can’t be selectively deleted; it ages out as new data overwrites the file.

Changes

This page changes as the site changes. The last update date is at the top.