--- title: "Privacy" description: "What this site collects and why: Google Analytics, the newsletter signup, and a log of requests from AI agents. I don't sell your data or run ad networks." url: "https://stg-3a6ivm.elementor.cloud/privacy/" canonical: "https://stg-3a6ivm.elementor.cloud/privacy/" post_type: "page" author: "Miriam Schwab" date_published: "2026-08-27T08:49:45+00:00" date_modified: "2026-10-31T17:28:33+00:00" extractor: "block" --- Short version: this is a personal site. I don't sell your data, I don't run ad networks on it, and most of what gets collected is the ordinary exhaust of running a website. Here's the specific list. ## Analytics I use Google Analytics, loaded through Google Tag Manager, to see which pages people actually read. It sets cookies and records things like the pages you visit, roughly where in the world you are, and what browser you're on. I look at it in aggregate — I'm not interested in identifying individual readers, and I don't try to. ## Newsletter The signup form goes to Kit (formerly ConvertKit), which stores your email address and whether you opened anything. I use it to send The Diff and nothing else. Every email has an unsubscribe link, and unsubscribing removes you from the list — you don't need to ask me. ## Contact form If you send me a message, it reaches my inbox and stays there like any other email. Name, email address, and whatever you wrote. I don't add contact-form submissions to the newsletter list. ## The agent request log This one is unusual enough to spell out, because most sites don't have it. This site publishes machine-readable versions of its content for AI agents and crawlers: llms.txt, Markdown copies of every page, an MCP server, and more. My Make My Site Agent-Ready plugin logs who uses them, so I can see which AI crawlers actually read this site, which is a thing I write about. To compare that with everything else, it also logs ordinary page views, including yours. For a page view, the log keeps the time, the page address (including anything after a ?), the full text your browser sends to identify itself (its user agent), and your full IP address. It also notes, as a yes or no, whether you got to the page by following a link on this site. It never stores the address of the page you came from. I keep the full IP address and user agent for six months because I've gotten visits wrong before. For a while I was misreading visits from Claude's desktop app, and since the log had already shortened those addresses, I couldn't go back and correct them. After six months, if a request wasn't identified as a known crawler, its IP address is shortened so that it points to your network rather than your device: 203.0.113.4 becomes 203.0.113.0. The full user agent is deleted at the same point, for every request. Requests for the machine-readable files keep the full IP address with no six-month limit. Those requests are almost always automated, and the full address is how the plugin checks that a crawler calling itself Googlebot or ClaudeBot really is one. If you follow a link on this site to one of those files, like the llms.txt link in the footer, your request is treated like a page view. When an agent searches this site through the MCP server, the search words are stored too. Anything that looks like an email address or a phone number is replaced before it's saved. Still, if an AI assistant searches here on your behalf, assume the words it used are in the log. There's also a daily count of visits that arrive from AI assistants like ChatGPT, Perplexity, and Claude. It records which assistant sent the visit, the page it landed on, and a number. Nothing about you. A full IP address is personal data under GDPR, and even a shortened one can count, so: the log is stored in this site's own database, it isn't shared with anyone, and it isn't used to build a profile of anybody. Entries stay until I delete them, with addresses shortened as described above. If you want yours removed, email me and I'll remove it. ## Hosting, CDN, and server logs The site runs on Elementor Cloud and sits behind Cloudflare. Both keep their own server logs, including IP addresses, for security and performance reasons — standard for any hosted site. Cloudflare also sets a __cf_bm cookie to tell bots from humans. ## Cookies The ones this site actually sets: Google Analytics cookies (see above), Cloudflare's bot-management cookie, and a small preference cookie remembering whether you chose light or dark mode. If you log in to WordPress here — which is me — WordPress sets session cookies. There's no advertising or cross-site tracking. ## What I don't do No ad networks. No data brokers. No selling or renting anything to anyone. No profile-building. No dark patterns to get your email. ## Your rights If you're in the EU, UK, or somewhere with similar law, you can ask me what I hold about you, ask for it to be corrected, or ask for it to be deleted. Email me and I'll do it — there's no form to fill in and no waiting period beyond however long it takes me to read my email. ## Changes If this changes materially I'll update this page and note it in the changelog. ## Contact Questions about any of this: use the contact form or email me directly.