de. Wxël ↵ home
/privacy data · cookies · small honesties
§ 07 privacy

What this site knows
about you

A short, plain account of the data this site sees, who else sees it, and how to ask for it back. Written in the same voice as the rest ; if anything reads like boilerplate, it's a bug.

last updated · 2026.05.24 jurisdiction · United Kingdom · UK GDPR & PECR
§ the short
version

The site is hand-coded, static, and served from a single origin. It sets no cookies. It runs no advertising trackers. It does not build a profile of you across the web.

It does load three things from elsewhere ; page-count analytics, web fonts, and the mail server that answers your email. Each is named below, with what it sees and why it's there.

If you'd rather none of it, the site reads perfectly well with JavaScript off and a font-blocker on.

§ what is
collected
  • page visits Counted by GoatCounter, a privacy-respecting analytics service operated from Ireland with servers in Finland and Germany. No cookies are set on this site. For each visit GoatCounter records: the page URL, the referring page, your screen size, your browser and language, and a country name derived from your IP address. Your IP address itself is never stored ; it is held only in memory, combined with your User-Agent and a salt that rotates every four hours, for up to eight hours, to recognise repeat visits within a session. After that, nothing remains that could identify you. Aggregate counts are visible to me at dewxel.goatcounter.com.
  • fonts Two typefaces (Newsreader and JetBrains Mono) are loaded from Google Fonts at fonts.googleapis.com and fonts.gstatic.com. Loading a font transmits your IP address and the page URL to Google's servers. This is transitional ; the fonts will be licensed and self-hosted in a later build, after which Google receives nothing.
  • email If you write to me at wxel@dewxel.london or parchement@dewxel.london, your message is delivered and stored by Google Workspace. Google sees the standard metadata of any email ; sender, recipients, subject, timestamps, message body. I keep correspondence for as long as the conversation remains live, then archive or delete it. No mailing list, no newsletter, no automated follow-ups.
  • hosting The site is served by Netlify, who, as part of operating any web server, see standard request logs ; your IP address, the page requested, the time, your User-Agent, the referring URL. These are operational logs, retained briefly, not used to profile visitors. Netlify's privacy notice covers their handling in detail.
  • nothing else There is no contact form, no comment section, no account, no analytics beyond the above, no embedded video, no social-media widgets ; the social links in the footer are plain <a> tags and only transmit anything if you click them.
§ cookies

No cookies are set on dewxel.london ; first-party or third-party. GoatCounter is cookie-free in its visitor-facing tracking. Google Fonts does not set cookies on the requesting page. Netlify may set a short-lived cookie only if the site is taken down for maintenance or rate-limited ; under normal operation, none. Your browser may cache fonts and pages locally, which is not the same as a cookie ; clearing your cache removes it.

§ who else
sees this
  • goatcounter Operated by Martin Tournoij in Ireland; servers at Hetzner in Finland and Germany. Aggregate page-view data ; no IP addresses or User-Agent strings retained in the database. Privacy policy at goatcounter.com/help/privacy.
  • google llc Two surfaces. Google Fonts receives your IP and the requesting URL when fonts load. Google Workspace processes any email you send to a dewxel.london address. International transfers to the United States are covered by Google's certification under the UK Extension to the EU–U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses.
  • netlify, inc. US-based. Serves the static files of this site and keeps operational request logs. Netlify is also certified under the UK Extension to the EU–U.S. Data Privacy Framework. Their privacy notice is at netlify.com/privacy.

No data is sold. No data is shared for advertising. There is no advertising on this site.

§ your rights
under UK GDPR

Under UK GDPR you have, in plain terms:

§ I

Access ; ask what data of yours I hold. I'll send it.

§ II

Rectification ; ask me to correct anything wrong.

§ III

Erasure ; ask me to delete it. For email, this means the threads in my inbox and any archive.

§ IV

Restriction & objection ; ask me to stop processing, or object to a particular use.

§ V

Portability ; ask for your data in a portable format.

§

To exercise any of the above, write plainly to wxel@dewxel.london. I'll reply within thirty days, usually sooner.

If you believe I've mishandled your data, you can complain to the Information Commissioner's Office at ico.org.uk. I'd prefer you wrote to me first ; most things resolve over one email.

§ the legal basis
briefly

Under UK GDPR, I rely on:

  • Legitimate interests for the analytics described above (understanding what's read, in aggregate, without identifying you) and for serving the site through a hosting provider.
  • Consent, implicit in your writing to me, for handling your email.
  • Legitimate interests for keeping correspondence threaded and searchable in the inbox where it arrived.

No data is used for automated decision-making or profiling.

§ changes

If anything material changes ; a new analytics tool, a contact form, a newsletter ; this page is updated and the date at the top moves forward. The previous version is preserved in the site's git history.

de. Wxël · london · 2026
last build ·