velade.org

Privacy

No cookies, no ads, no trackers from third parties. What this site measures, and why.

Last updated

The short version: velade.org doesn’t use cookies, doesn’t show ads, and doesn’t send anything about you to Google, Meta or any other third party. To see which pages are read, the site uses Umami, a privacy-friendly analytics tool that is free software, like Vela. It runs on our own server.

Analytics

Umami counts visits without cookies and without identifying you. For each page view it records:

  • the page, and the site you came from, if any;
  • your browser, operating system and type of device, and your screen size;
  • your language, and your country, worked out from your IP address.

Your IP address itself is not stored. To count unique visitors, Umami combines it with your browser and a secret value that changes every month, then keeps only a hash of the result. It can’t be traced back to you, it can’t follow you to other sites, and a new month starts from scratch.

Umami is open source under the MIT license: anyone can read exactly what it collects. Our instance runs on a server we manage ourselves, and the data stays there.

Replays and heatmaps

To see where the site is confusing, Umami also records a small sample of visits, about one in seven, as a replay: how the page was laid out, where you scrolled, moved the mouse and clicked. A replay stops after five minutes at most. The same sample feeds heatmaps, which show where people click on each page, added up across all visits.

A replay contains the page as you saw it, which is the same public text everyone sees. Anything typed into a field is always masked before it leaves your browser, though the site has no forms and no accounts, so there is nothing personal to type anyway. Replays are linked only to the anonymous session described above, never to a name, and are never shared with anyone.

Server logs

Like every web server, ours writes a log line for each request: IP address, time, the page requested, your browser, and the referring page. The logs are used only to keep the site running and secure, and are deleted automatically after about two weeks.

Everything else

Fonts, images and scripts are all served from velade.org itself. Nothing is loaded from other sites, except the Umami script above.

Links to GitHub take you to GitHub, where GitHub’s privacy statement applies.

Opting out

The site works exactly the same without analytics. If your browser sends a Do Not Track or Global Privacy Control signal, the analytics scripts are never loaded: no visit is counted and nothing is replayed. The same is true if you block analytics.brandodev.it with a content blocker, or browse with JavaScript turned off.

Questions

For anything about this page or your data, open an issue on the website’s repository.