Privacy
What this site stores, what it does not store, and how to have anything removed.
This site does not set cookies for readers. The theme choice is kept in your browser's local storage and never reaches the server. There is no advertising script, no third-party pixel, and no cross-site tracker.
Reading is counted without identifying anyone. The server records a daily count per path and an optional referrer hostname. A unique visitor is counted with a SHA-256 hash of the day, IP address, browser string, and the site URL. The hash is scoped to one day and those rows are deleted after 90 days. The raw address is not stored.
Comments store the name, optional website, text, and timestamp you submit, plus a hash of the client address for rate limiting and spam checks. The address itself is not stored. Comments are held for review by default. You can ask for a comment to be removed.
There is no email list. Updates are delivered by RSS, JSON Feed, or browser notification, and none of those require an account or an address.
Browser notifications store a push endpoint and two public encryption keys, nothing that identifies you by name. You can revoke them in your browser at any time.
Push notifications are delivered through your browser's push service, which necessarily sees the endpoint and the metadata needed to deliver the message.
Cloudflare keeps request logs for operations and abuse response. They are not used to build profiles. The D1 database is backed up for disaster recovery.
Questions, corrections, or a removal request: hello@tahag.dev. Last updated 2026-11-09.