Privacy

Last updated 30 August 2026.

The short version

This site is a few static pages about a piece of software. It asks once whether you want analytics, and does nothing until you answer. Decline, or ignore the banner entirely, and Google is never contacted from here and no analytics cookie is written — the page is not gated on your answer, and saying no changes nothing about what you can read.

This used to say the site ran no analytics at all, and that there was therefore nothing to consent to. That changed when Google Analytics was added; the banner exists now because there is something to ask about, which is the same reasoning arriving at a different answer.

What is stored in your browser

Two things without any consent needed, because both exist only to honour a choice you just made:

Neither leaves your browser. Clearing site data removes both, and the site works fine without them — it follows your system theme and asks about analytics again.

Analytics, only with your consent

If you accept, the site loads Google Analytics 4 (property G-27PPN5D1LY) and sets its first-party cookies — _ga and _ga_<id> — to count visits and see which pages people read. Google receives your IP address, the pages you view, and basic device and browser information, and acts as our processor for it.

The lawful basis is your consent, under GDPR Article 6(1)(a) and the ePrivacy Directive Article 5(3). That is why nothing loads before you answer: consent has to come first, and it has to be an affirmative act. Google's script is not on the page at all until you say yes — not loaded and then held back, which would still contact Google on first paint.

Withdrawing is as easy as agreeing was, which Article 7(3) requires: Cookie settings in the footer reopens the banner at any time. Choosing Decline there deletes the analytics cookies as well as stopping any further collection.

What the server records

The web server keeps ordinary access logs: IP address, timestamp, the path requested, the referring page and your browser's user-agent string. This is the standard record any web server keeps in order to be operated and defended, retained on the basis of legitimate interest (GDPR Article 6(1)(f)) and kept no longer than needed to serve that purpose. The site is served through Cloudflare, which terminates TLS and therefore also sees this request metadata.

What is not collected

No account, no email address, no form on the site to type one into. No advertising, no profiling, no cross-site tracking, no data sold or shared with anyone for their own purposes. The analytics above is Google measuring this site for us as our processor; it is not advertising, and the advertising signals Google supports are switched off explicitly rather than merely left unused.

Links away from here

The live demo, the source repository and the documentation are separate services with their own logs and their own notices. This page describes cairnobs.org only.

Your rights, and who to ask

If you are in the UK or EU you have rights of access, rectification, erasure, restriction, objection and portability over personal data held about you, and the right to complain to your supervisory authority. Given what this site actually holds — access logs — a request will usually be answered by finding and deleting log lines.

The controller is Coffey Labs. Write to privacy@linuxexperts.net.