Privacy Policy
This is a static site with nothing to sign up for. Here is exactly what it records, what it does not, and what it keeps in your browser.
Last reviewed against the code
The short version
There are no accounts, no comments, no forms and no newsletter, so there is nothing for you to hand over and nothing for me to store. The site sets no cookies. Analytics is off until you allow it, and it runs on a server I own rather than a third party's. The YouTube and Spotify players request nothing at all until you press the button that loads them.
What the site is
Every page here is a file built ahead of time and served as-is. There is no application running behind it, no database, and no login anywhere on the site. Fonts, images, stylesheets and scripts are all served from this domain — there is no third-party script, no advertising network, no social widget and no remote font.
Analytics, if you allow it
The site can count visits using Umami, self-hosted at wa.santhoshj.com — my own server, not an analytics
company's. It is off when you arrive. Until you answer the bar at the foot of the page,
the measurement script is never fetched, so nothing is recorded and no request reaches
the analytics host at all.
If you allow it, what gets recorded is the shape of the visit, never who made it: the page you are on, and a handful of named interactions — opening an entry or a channel, a link leaving the site, asking for a player, copying a code block, opening a tag or category, using a return or pager link, opening the feed, reaching the end of a piece, and asking for a URL that does not exist. Each carries only what it is about, such as which channel or which provider. None of it is joined to a person, a profile or a visit history, and none of it is shared with anyone.
If you decline, nothing is recorded — there is no script loaded to record it with. That is also why declining is the one choice the site never counts.
The embedded players
Video and podcast entries hold a real player from YouTube or Spotify rather than sending you away. Until you press Load the player, the address of that player is not in the page that was served to you, so your browser has no way to contact either company and does not.
When you do press it, the player loads and that provider can see your IP address and set
its own storage, under its own privacy policy rather than this one. Allowing analytics
and loading a player are separate decisions; neither implies the other. YouTube is
requested through youtube-nocookie.com.
What is kept in your browser
Two values, both in this site's local storage, both readable only by this site in this browser. Neither is ever sent anywhere.
sj:analytics— whether you allowed or declined the visit count.-
sj:embeds— set only if you tick Remember this for the rest of the site when loading a player.
To change either answer, clear this site's data in your browser. The consent bar then asks again on your next visit.
The server
The site is served over HTTPS with HSTS, a Content-Security-Policy that permits only this
domain plus the two embed providers and the analytics host, a referrer policy of
strict-origin-when-cross-origin, and a permissions policy that denies camera,
microphone and location outright. Like any web server, it keeps standard request logs —
the time, the URL asked for, the response, the browser string and the IP address the
request came from. They exist to run and debug the server; they are not used for
analytics and are not combined with anything else.
Links that leave
The profile links at the top of every page, and the “Open on YouTube / Spotify / GitHub” reference at the foot of an entry, take you to sites I do not run. Once you are there, their privacy policies apply, not this one.
Changes
This page is part of the site's source, so it changes in the same commit as the behaviour it describes. The date above is when it was last reviewed against the code.
Questions
The profile links at the top of every page all reach me. If something here is unclear or looks wrong, say so and I will fix it.