Privacy and cookies

Optional Google Analytics

If you accept analytics, this site loads Google Analytics 4 to measure visits and understand which pages people read. Google receives information such as the page address, browser and device details, and interactions. Analytics cookies (including _ga and _ga_…) help distinguish visits. They are configured to expire after 180 days, renewed with use.

Google Analytics does not load until you accept. Advertising consent stays off, and Google Signals and advertising personalisation are disabled in the site’s tag configuration. The initial page address sent by this site excludes query strings and fragments.

Your choice is stored in this browser for 180 days. Use Cookie settings in the footer to accept or reject analytics at any time. Rejecting stops future measurement by this tag and removes its analytics cookies; it does not delete data already received by Google.

Read how Google uses information from sites that use its services and Google’s privacy policy.

Member accounts and post emails

If you sign up for notifications and access to resource downloads, we store your email address, a password hash and your email subscription preference in Cloudflare D1. You confirm your email before member access is enabled. Resend delivers account emails and, if you opt in, new-post emails. Member sign-in uses a necessary session cookie lasting up to 14 days. Account pages do not load Google Analytics.

Unconfirmed member registrations expire after seven days and are removed by daily maintenance. An older commenter record may remain if it is needed for comments you already submitted. Password reset links last one hour; account deletion confirmation links last 24 hours.

Every post email includes an unsubscribe link. You can also change your preference in the account settings without losing access to downloads. The account’s “Forget all about me” option sends a confirmation email, then removes your account credentials, email address, subscription and comments from the live site. Anonymous thread placeholders and replies by other people remain. Previously delivered emails and routine backups cannot be recalled; contact us about any remaining data concerns.

To limit automated abuse, hashed rate-limit identifiers are kept for up to a day. Verification and reset tokens are stored as hashes and removed after expiry or use.

Other site features

The site remembers your theme preference in browser storage. Admin sign-in uses a session cookie. Comments collect the name, email address and message you submit, alongside IP address and browser information used for moderation and spam prevention. Your submitted name and approved comment appear publicly; your email address is not published with your comment. Comment and account forms use Cloudflare Turnstile for spam protection.

Videos use YouTube when played. Store purchases take place on Stripe’s hosted checkout, where Stripe processes the payment and order information under its own privacy terms.

For questions about your data, contact [email protected].