Privacy
Updated
The short version
- No cookies, no ads, no tracking, and no analytics beyond a simple visit counter.
- If you send a postcard, I keep your name, your message and your website if you add one. They show up here once I approve them.
- If you send me a song, I keep the song, the artist, and your name and note if you add them. It shows up on the Guestbook and Music pages once I approve it.
- To stop spam and to count visits, the server keeps scrambled codes made from your connection, never your IP address itself. They’re deleted within 7 days.
- Your browser remembers a few things for you, like light or dark mode. Those stay on your device.
Who runs this site
I’m Chessie, and this is my personal site. If you have a question, or want something changed or removed, write to me at hello@chessie.cat.
Postcards
When you send a postcard, I keep your name, your message, your website if you add one, the language of the page you wrote it on, and when you sent it. Nothing is public until I’ve read it and approved it. Once approved, it stays up until I take it down or you ask me to. Postcards I don’t approve are deleted 30 days after I decide.
To stop spam, the server also keeps a scrambled code made from your connection, so the same person can’t send dozens of postcards in a row. It’s a one-way scramble that changes every day, so I can’t turn it back into your address, and it’s deleted after 7 days.
On the Guestbook page, once you start filling in a form, Cloudflare Turnstile checks that you’re not a bot. It’s the only outside service your browser talks to on this site. It runs small checks in your browser and doesn’t read what you write. Cloudflare explains more in its Turnstile privacy addendum.
Song suggestions
When you send me a song on the Guestbook page, I keep the song, the artist, your name and note if you add them, the language of the page, and when you sent it. Nothing shows until I’ve had a look. Songs I add to the list stay up until I take them down or you ask me to, and the ones I don’t add are deleted 30 days after I decide. The same spam protection as the postcards applies: a scrambled daily code made from your connection, deleted after 7 days, and Cloudflare Turnstile on the form.
The visit counter
The home page shows how many visits the site has had. To count each visitor only once a day, the server keeps scrambled marks made from your connection and the page you opened. The marks and the key used to make them are deleted every day, so after midnight (UTC) nothing can be linked back to anyone.
Music and Discord status
The site shows what I’m listening to and whether I’m online. My server fetches this about me from Lanyard, Last.fm and Discord’s image servers, and the lyrics of the song I’m playing from LRCLIB; album covers come through my server too. Your browser never contacts these services, and they learn nothing about you.
The webring
The Home and Friends pages link to the lanyard.cafe webring. My server reads the ring’s public list of member sites from lanyard.cafe to know which sites come before and after mine, without anything about you. Your browser only goes to another member’s site when you click one of those links.
Hosting
Cloudflare hosts the site and stores the postcards and songs. Like any host, it needs your IP address to send you the pages. I don’t keep logs of visits. If something breaks, Cloudflare may record the error, and I may turn on short logs while I fix it. Cloudflare deletes both after 3 days, which is how long it keeps logs on this site’s plan.
What your browser keeps
These stay on your device and never reach me:
- your light or dark mode choice, and whether you paused the background motion;
- a few small notes for the open tab, such as whether you’ve seen the intro, recent music data, whether your visit was counted, and whether the animation ran smoothly on your device;
- a postcard you’re still writing, for the open tab only, so a reload doesn’t lose it; it’s removed once you send it or close the tab;
- postcards you sent that are still waiting for approval, for up to 14 days, so you can see them.
You can clear them any time by clearing this site’s data in your browser.
Why I keep this
Postcards and songs, because you sent them to be shown here. The spam check, the visit counter and the hosting, to keep the site running and safe. In legal terms, that’s my legitimate interest.
Your rights
You can ask me what I have about you, ask me to correct or delete it, or object to how I use it. Write to hello@chessie.cat and I’ll answer within a week. If you think I’ve handled your data badly, you can also complain to the data protection authority where you live.