PERSONAL INTERFACE — Privacy
What this site
knows about you
What this site learns about a visitor, and where that goes. The short answer: it sets no cookies at all, and there is no account and no contact form.
- Last revised
This covers goldibug.com and the paths under it. Anywhere a link from this site points to keeps its own policy, which this document does not govern.
What is collected
There is no sign-up, no login, no comment thread and no contact form here. Not one field asks for a name, an email address or a phone number, so there is no visitor-supplied personal data to hold. What follows is what opening a web page produces on its own.
- Request records
This site is served as static files by Cloudflare and runs no code at request time. Delivering and protecting a request leaves an IP address, a timestamp, the requested path and a browser identification string with Cloudflare. Cloudflare holds the per-request records; what reaches this site’s operator is aggregate figures.
- Visit counts
Cloudflare Web Analytics. It plants no cookie and builds no browser fingerprint; what it aggregates is the page path, the referrer, the browser and operating-system family, a country inferred from the IP address, and load timings. It does not identify an individual visitor and does not follow anyone to another site. It is here for one reason: to know which pieces get read.
- Browser storage
No cookies, no localStorage, no sessionStorage, no IndexedDB. Not even the chosen language is stored — the address carries it. That sentence is a checkable fact rather than an intention: no line in this repository touches browser storage.
- Web fonts
The typeface comes from Google Fonts, but it is downloaded at build time and served from this site’s own domain. Opening a page makes no request to a Google server, so the typeface never hands a visitor’s IP address to Google.
Where the data goes
These two, and nothing else. Both are US companies, so using this site means accepting that connection data crosses borders.
- Cloudflare, Inc.
Hosting, content delivery and visit counts. The request records and the analytics above are processed here.
- Google LLC
This site is registered with Google AdSense. As it stands, the only thing that reaches Google is the publisher identifier that proves who owns the site — no visitor data.
Advertising
This site serves no ads. No ad script loads on any page, and that is enforced rather than intended: this site’s Content-Security-Policy admits exactly one external origin and it is not an ad network, so an ad script cannot execute at all.
- If that changes
This document gets revised before any ad appears, not after. What would change: Google and its advertising partners would use cookies or equivalent identifiers to select ads and measure impressions and clicks, and that can draw on an IP address, device and browser details, which pages were read here, and activity on other sites. Google processes that data; this site’s operator cannot see it at the level of an individual visitor.
- Consent
Visitors in the European Economic Area, the UK and Switzerland would be asked first, through the certified consent tool Google requires. Outside those places no consent dialog appears, and the refusals below stand in its place.
What can be refused, and asked for
The three below are here against the day this site carries ads. All three already work today.
- Google ad settings
Personalised ads can be turned off in a Google account’s ad settings. adssettings.google.com
- Industry-wide opt-out
The Network Advertising Initiative and YourAdChoices opt a browser out of personalised advertising across many companies at once. optout.networkadvertising.org · optout.aboutads.info
- Block it in the browser
Blocking third-party cookies in browser settings is enough. This site uses no cookies, so blocking them breaks nothing here.
You have the right to access, correct, delete and halt the processing of your personal data. What complicates that here is that this site holds nothing which identifies a visitor, so there is no record to find and erase. Data processed for advertising is held by Google and has to be claimed from Google directly.
Under Korean law a dispute or an infringement can be reported to the Personal Information Protection Commission, taken to the Personal Information Dispute Mediation Committee, or reported to the National Office of Investigation’s cyber bureau.
Contact
This site is run pseudonymously and publishes no email address. Questions about this policy, and requests to correct it, belong in an issue on the repository. It is a public channel, and that is worth knowing before writing in it.
Revisions
Every change to this document is a commit in the repository. The date above moves only when the substance changes, never for a typo — putting a new date on an unchanged policy is a false statement about it.