Privacy policy

This is a personal blog, run by one person, on a server I own and operate myself. This page describes what actually happens to your data when you use it. Not a generic template, just what this site actually does.

What I collect, and why

• Account data. If you register, I store your username, email address, and a password hash (never the password itself, since hashing is one-way, so I can't see or recover it even if I wanted to).
• Comments, likes, and reports. Anything you post as a comment, any like you leave, and any report you submit are stored so they can be shown, moderated, or acted on.
• Contact form messages. If you write to me through the contact page, that message and the email address you gave me are stored so I can read and reply to it.
• Avatar images. If you upload a profile picture, it's stored on this server's media storage.
• Analytics, only if you say yes. If you accept analytics, I record which pages get viewed, roughly how long, and which outside site linked you here. It is first-party and stays on this server. If you decline, none of it runs. There's more detail in its own section below.
• Server logs. Standard request logs, including IP addresses, are kept briefly. Their main purpose is rate limiting, stopping abuse of login, comment, and upload endpoints, not tracking who you are.

What I don't do

No third-party trackers, no advertising, and no selling or sharing your data with anyone else. There's no marketing pixel, no ad network, no "partners" clause, and no Google Analytics or anything like it. The analytics I do run are first-party, opt-in, and never leave this server. If I ever add something that changes this, it will show up as a real change to this page, not buried in a longer document.

Analytics

Analytics are off until you accept them. The first time you visit you'll see a small banner with Accept and Decline, and there's an "Analytics: on/off" switch in the footer you can use to change your mind at any time. If you decline, nothing is set and nothing is recorded.

If you accept, I record page views (which page you looked at, plus short "still here" pings so I can tell roughly how long a page held your attention) and the host of the site that linked you here (just the host, like "google.com", never the full address or what you searched for). These are tied to a random id kept in a cookie so I can tell a returning visit from a new one. I do not store your name, your IP address, or anything that personally identifies you in the analytics, and none of it is shared with anyone or sent to any third party. It exists only so I can see which posts land and how people find the site. Raw analytics data is deleted after 90 days.

Cookies

The essential cookies are a session cookie that keeps you logged in and the short-lived token that goes with it. If you accept analytics, there is also one analytics cookie holding the random visitor id described above. Decline, or switch analytics off in the footer, and it is never set, or is cleared if it was already there. Nothing tracks you across other websites.

How long data is kept

Account data, comments, and uploaded avatars are kept for as long as your account exists. You can delete your account yourself at any time from Account settings, under Data and privacy. When you do, your comments and other contributions stay on the site but are shown as anonymous, so conversations other people took part in are not torn apart, while your username, email, password, and avatar are removed. If you would rather I handle it, you can still reach me through the contact form.

Your rights

From Account settings, under Data and privacy, you can download a copy of everything this site holds about you as a single file, and you can delete your account. You can also ask me directly, at any time, to see your data, correct something that is wrong, or remove your account. Since this site is operated from Norway, these requests are handled in the spirit of GDPR regardless of where you are writing from.

Changes to this policy

If what this site collects or does with your data changes, I'll update this page to reflect it. This document is meant to describe reality, not a fixed contract nobody rereads.