Privacy

This site sets no cookies, runs no JavaScript, and loads nothing from a third party — no analytics tag, no tracking pixel, no embedded fonts or scripts from anyone else’s server. There is no consent banner because there is nothing to consent to. Everything you see was built into a plain HTML page before you asked for it.

That is not a policy we promise to keep; it is how the site is made. You can check it: view the source, or open your browser’s network panel and watch which servers it talks to. The answer is one — ours.

What the server records

Our web server keeps an access log, the way essentially every web server does. It is the only way we can tell which pages people read, and whether anyone finds their way to the contact page. Every address we answer for is logged the same way — this site, the www. version of it, and our git. subdomain — so that nothing quietly falls outside what is written here. For each request it stores:

• The page requested, and the date and time.
• Whether it worked — the response status, so we can find broken links.
• Your browser’s self-description (the “user agent”), which is how we separate people from search-engine crawlers.
• The site you came from, if you followed a link — see below.
• A blurred network address — see below.

Two things worth being precise about

Your IP address is never stored in full. It is shortened at the moment the line is written, not cleaned up afterwards: the last part is replaced with zeroes before anything touches the disk. What remains identifies a rough network, not a person or a household — an entire office and an entire street can look identical. There is no complete address in any file, so there is none to lose, hand over, or be asked for.

We do keep the site you came from, and that is a real disclosure. If you arrive by clicking a link, your browser tells us which page it was, and we keep the site’s name — example.com, not the full address of the page, and never anything after the ?. We keep it because it is the only way to know whether anyone finds us at all, and from where. We would rather write that plainly here than collect it quietly.

How long, and who sees it

Logs are deleted automatically after about 30 days, on a rotation the server enforces itself.

Two summaries do outlive them, and we would rather say so than let you find out.

A daily tally, kept indefinitely: so many pages read, so many of them by crawlers, so many reaching the contact page. Dates and counts, nothing else.

A monthly ranking, also kept indefinitely: which pages were read most that month, which sites people arrived from, which browsers and crawlers called, and which blurred networks the automated probes came from — each as a name and a number of times. It is how we can still answer “what did people read last March” once March’s log is gone.

What that ranking is not: it is never a record of what any one visitor did. A page has a count beside it and nothing else — not who asked for it, not when beyond the month, not what else they read. The lines are never joined back together, because the pieces needed to join them are not kept.

Nothing is copied to any other company, and there is no analytics account anywhere holding a shadow copy — the data never leaves our own server except as those two summaries.

We do not build profiles, we cannot follow you across other websites, and there is nothing here that could identify you personally.

Getting in touch

Mail sent to welcome@engineer.company is read by us and kept in our own mailbox, hosted with Apple iCloud. We use what you write to answer you. We do not add you to a mailing list, and there is no mailing list to add you to.

If you want to know what we hold about you, or want it removed, write to the same address and we will answer honestly — which, given the above, will usually be “nothing that identifies you”.