The short version
- No ads, no Google Analytics, no tracking pixels, no selling or sharing your data.
- I only keep what you send me (a contact message or a post on The Wall) plus simple visit counts.
- IP addresses are deleted from Wall posts after 30 days and are never stored for visit counts.
- Your fitness logs stay in your own browser. They never reach my server.
- YouTube, Twitch, Spotify and Vimeo players don't load until you click them.
What I keep
| What | Why | How long |
|---|---|---|
| Contact formYour name, email and message | So I can reply to you. | Until I've dealt with it, then I delete it. Ask any time and it's gone. |
| Posts on The WallYour handle, message, doodle, stickers, video link, color and mood | It's a public guestbook: everything you post is shown to everyone. | Until you ask me to remove it, or I remove it for breaking the rules. |
| Your country on Wall postsTwo letters (like US), from Cloudflare | Shown as a little flag on your post. | As long as the post. |
| Your IP address on Wall posts | To stop spam and abuse. Only I can see it. | Deleted automatically after 30 days. |
| Visit countsPage, referring site, date, and a one-day code | To see which pages people read. The code is a scrambled one-way fingerprint that changes every day, so I can count unique visitors without storing your IP or following you across days. | 13 months, then deleted automatically. |
| Spam and abuse limits | Your IP is held in memory to stop floods of messages, logins or reactions. | Up to an hour, never written to disk. |
| "Callers online" on The Wall | Counts how many people have The Wall open. | 35 seconds, in memory only. |
| Food lookupsFitness page | Your barcode or search goes to my server, which asks Open Food Facts. They never see your IP. | Product results are cached. Your searches aren't kept. |
| Server logs | Standard web server logs, used to fix problems. | About 2 weeks. |
| Dead Hoursdeadhours.codex64.net | Your initials and score on the leaderboard, and maps you publish. Multiplayer connects players directly; if that fails, it passes through my relay server. Nothing is recorded. | Leaderboard and maps stay until removed. |
I never sell this information, share it with advertisers or use it to build a profile of you. The only people who can see private data (contact messages, IP addresses) are me and the hosting providers listed below.
On your device
Some features save things in your browser's own storage, not on my server. I can't see any of it.
- Fitness trackers: your food, cycle and supplement logs.
- Settings: your theme, desktop icon positions, Windows color scheme and sound choices.
- The Wall: the handle you last used, and whether you've seen the dial-up intro.
- Player choices: which services you chose to always allow (see below).
Clearing this site's data in your browser settings removes all of it. Back up your fitness logs first if you want to keep them.
Videos and music
Pages like Gaming, Curiosity, The Wall and the Music window can show players from YouTube, Twitch, Spotify and Vimeo. Those players come from the company's own servers, which see your IP address and can set cookies. So nothing loads until you click Load. If you tick Always allow, that choice is saved in your browser.
Checking your choices…
Other services
- Cloudflare delivers and protects the site. Every visit passes through it, so it sees your IP address. Cloudflare's policy
- DigitalOcean hosts the server in New York.
- Open Food Facts supplies food data, through my server.
- FrogFind powers search in the desktop's Internet Explorer. Searches go through my server, so FrogFind doesn't see your IP.
- Some pictures, like album art and link previews, load straight from the site that hosts them. That site sees your IP address, as with any image on the web.
Your rights
You can ask to see, correct or delete anything I have about you: a contact message, a Wall post or anything else. Send a message through the contact form or email me. I'll reply within 30 days. You don't need to give a reason.
If you're in the EU or UK, I rely on your request (contact form), my legitimate interest in running and protecting the site (Wall moderation, abuse limits, visit counts) and your consent (video and music players). You can also complain to your local data protection authority.
Do Not Track: this site doesn't track you across other websites, so it works the same whether or not your browser sends that signal.
Children: the site isn't aimed at children under 13, and I don't knowingly collect their information. If a child has posted something, ask me and I'll remove it.
Security
The whole site runs over HTTPS. Private data sits on a firewalled server that only Cloudflare can reach, and admin pages need a password. If you find a security problem, please tell me through the contact form or email before sharing it publicly. Details are in security.txt.
Changes
If this policy changes, I'll update it here and change the date at the top.