Privacy Policy

• No cookies. No consent banner, because there is nothing to consent to.
• No accounts, no logins, no forms, no comments.
• No advertising, no ad networks, no data sold or shared for marketing.
• One privacy-friendly analytics tool counts page views in aggregate. That is the whole list.

This site uses Vercel Web Analytics, which is cookieless. It stores nothing on your device and reads nothing from it. For each page view it records:

• The page you visited and the referring page, if any.
• Your country, derived from your IP address.
• Coarse device, operating system, and browser type.
• UTM campaign parameters, on the rare occasion a link carries them.

Your IP address is processed in transit to derive a hashed, daily-rotating identifier so repeat views are not double counted. The raw IP is not stored, the hash cannot be reversed back to you, and it is discarded and regenerated every day. There is no cross-site tracking and no persistent profile.

• No cookies or local storage used for tracking.
• No browser fingerprinting.
• No mouse tracking, session recording, or heatmaps.
• No email addresses, unless you choose to write to me yourself.
• No Google Analytics, no advertising pixels, no social media trackers.

Fonts are self-hosted at build time rather than fetched from Google, so loading this page does not reveal your IP address to a font provider.

Under the GDPR, the legal basis is legitimate interest (Article 6(1)(f)): knowing roughly how many people visit, and which projects they open, so I can tell whether this thing is worth maintaining. That interest is weighed against a genuinely minimal privacy impact, since the data is aggregate and no individual is identified.

Because no information is stored on or read from your device, the ePrivacy Directive consent requirement, the rule that produces cookie banners, does not apply here.

The site is hosted by Vercel Inc., which acts as the data processor for hosting and analytics and maintains its own privacy terms. Standard server logs are handled by Vercel as part of hosting. No other third party receives visitor data from this site.

The GDPR grants you rights of access, rectification, erasure, restriction, objection, and portability. In practice there is a catch: the analytics data is aggregate and pseudonymous, so I hold nothing that can be linked back to you, which means there is no personal record for me to hand over or delete. If you object to the analytics entirely, any content blocker or a browser Do Not Track setting will stop it, and nothing on the site will break.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.

Questions, corrections, or a strong opinion about hashed identifiers? Write to neiv@malaviya.info. If this policy changes, the date at the top changes with it.