Cookie Policy
Last updated: 2 May 2026
What this site stores in your browser
This site does not use traditional cookies. But under EU ePrivacy law, the rules apply to anything stored or read on your device — not just cookies. Here is the full list.
Strictly necessary (no consent required)
These are required to make the site work. They cannot be disabled.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
pw-consent | localStorage | Stores your answer to the consent banner so it does not ask again | 12 months |
Functional (no consent required — user-requested)
These store your preferences. They exist because you actively asked for them, not because the site wants to track you.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
pw-prefs | localStorage | Theme (dark/light), accent colour, density, serif toggle, easter egg state | Until you clear browser storage |
Analytics (consent required — off by default)
Loaded only if you accept analytics in the consent banner. The Umami tracker does not write a session cookie or persistent localStorage entry on your device. Consent is still required because the tracker reads your User-Agent string and screen attributes to count distinct visits, which counts as access to information stored on your device under EDPB Guidelines 2/2023 on the technical scope of ePrivacy Article 5(3).
| Name | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
umami.disabled | localStorage | Umami tracker | Opt-out flag, only set if you reject or withdraw consent | Until you clear browser storage |
Marketing
None. I run no advertising, no retargeting, no audience networks.
How to manage your choice
- Open the “Cookie settings” link in the footer at any time to change your decision.
- Clearing your browser’s site data resets all stored values.
- “Reject” disables analytics on this site permanently for this browser. The functional and consent-state entries remain because they are required to honour your reject choice.
Server-side data (not stored in your browser)
Separately from browser storage, my server logs your IP address and user-agent for 30 days as part of standard operations (security, abuse prevention). This is covered under “Legitimate interest” in the Privacy Policy and is not affected by your consent choice.
If you accept analytics, Umami stores aggregate visit data on my server for 25 months. If you reject, nothing is stored on the server beyond the standard request log.
Why I bothered with this page
The EU ePrivacy Directive (Article 5(3)) and the EDPB guidelines from October 2024 say that any storage on a user’s device requires consent unless it is strictly necessary or user-requested. That includes localStorage, not just cookies. Most sites have a banner that lies about what it does. This page says what is actually there.