Privacy

These pages

The pages are a static build. There is no database and no cookie; Cloudflare's cookieless Web Analytics counts page views, and nothing you read here is logged against you beyond the ordinary request records the edge keeps. After a page has painted, it loads two telemetry scripts, described below.

Your connection

When the footer approaches view after the opening finishes, it requests connection details from this site's Cloudflare trace endpoint. It displays your IP address and approximate country. Browser information is read locally from your browser's user agent. The footer does not store these details or send them to another service.

Page telemetry

The first script is the Grafana Faro Web SDK. It records page load timings, script errors and page load traces. With each record it sends the page path, the browser name and version, the operating system, the language, the viewport size, the user agent string and a random session id that lives in this tab only. It does not record what you type, and the site never sets a user identity.

The second script is Cloudflare's Web Analytics beacon. Cloudflare's documentation says it counts page views and visits and measures page load time and Core Web Vitals, grouped by country, page path, referring site, device type, browser and operating system. The same documentation says it does not collect or use personal data and does not track you across sites.

The Grafana script posts its records to rum.xoxd.ai, a receiver on the GloriousFlywheel cluster. The receiver accepts posts from glorious.build and xoxd.ai only and stores the records in the cluster's log and trace stores. The stored record carries no IP address. The Cloudflare beacon loads from static.cloudflareinsights.com and posts its counts to cloudflareinsights.com, a Cloudflare address.

The Grafana records are kept for seven days and then deleted. Cloudflare keeps the Web Analytics counts in its dashboard; its documentation states no retention period for them.

To opt out of both scripts, turn on Global Privacy Control or Do Not Track in your browser. Neither script then loads and nothing is sent.

The contact form

The form on the contact page collects what you type into it: an email address, an organization, what you build, the scale you build at, and whether you want source access. It also runs a proof-of-work check in your browser before it will submit, which is arithmetic, not a cookie.

A submission is delivered as one email to the operator. It is not added to a mailing list, not shared with anyone else, and not used to profile you. Replies come from a person.

Field limits: organization 2 to 200 characters, what you build 10 to 2000 characters, and scale as a whole number of people from 1 to 500. Anything outside those limits is refused rather than trimmed to fit.

How long it is kept

Submissions live in the operator's mailbox. Ask and they are deleted; there is no other copy, because there is no database behind this site.

Asking

The contact form is the channel for privacy and security questions.