Privacy

Analytics

This site uses Umami, a self-hosted, open-source analytics tool running at analytics.po4yka.dev. No data leaves the site's own infrastructure. Umami is configured with data-do-not-track="true", which means it honors the browser Do-Not-Track header — visitors with DNT enabled are not counted.

As a server-side fallback, the Cloudflare Worker middleware records a single pageview to the same Umami instance when the client-side script is blocked or has not yet run. These server-side events are tagged "edge" in the Umami dashboard so the two streams are distinguishable.

Umami does not use cookies for analytics. It derives a session signal from a first-party hash of the IP address and user-agent string, which is not stored or linked to any identity. The raw IP address is not retained.

Third-party trackers and advertising

There are no third-party trackers, advertising networks, or affiliate scripts on this site. No visitor data is sold, rented, or shared with third parties.

Admin area

The /admin area is secured with WebAuthn passkeys and is excluded from analytics collection entirely. Admin sessions are stored as short-lived tokens in a Cloudflare D1 database and are not visible to site visitors.

Visitor preferences

Theme, font size, and locale preferences you set via the Settings page are stored in your browser's localStorage only. They never leave your device.

Contact

Questions about data handling can be sent to hello@po4yka.dev.