Privacy
A site that does not watch you.
No analytics, no advertising, no contact form — just static pages from a CDN. The only third-party code is the Disqus comment box on blog posts, disclosed in full. About the shortest privacy policy you will read this week.
No. II · Privacy Policy Effective r format(Sys.Date(), '%B %Y')
No analytics, no advertising, and no contact form — just static pages served from a CDN. The one piece of third-party code is the Disqus comment box on blog posts, disclosed in full below; otherwise, about the shortest privacy policy you are likely to read this week.
❦ ❦ ❦
The summary
0
The summary
i.
No Analytics
No Google Analytics, Plausible, Fathom, GoatCounter, Umami, or Matomo. No pageview pixel of any kind.
ii.
iii.
No Tracking
No pixels, beacons, fingerprinting, ad networks, or social embeds. The Disqus comment widget (blog posts only) is third-party JavaScript — see § III.
What this site collects
§ I — What is collected
Nothing. The page you are reading is HTML.
When your browser requested this page, it sent an HTTP request to the host. That host returned the file you are now reading. No form was submitted, no account was created, no script ran a tracking beacon. Nothing about you was recorded by this site. (Blog posts are the one exception — they load the Disqus comment widget; see § III.)
The only information that may briefly exist in connection with your visit is whatever the underlying web host technically must handle in order to serve the page — described next, in the spirit of full disclosure.
On the hosting provider
§ II — Hosting
Static files, served from a CDN.
The site is hosted on a static-file provider (currently Azure Static Web Apps; the active host is noted in the site footer). Such providers may, as part of operating their network and protecting against abuse, briefly process technical request data such as:
- The IP address making the request
- The User-Agent string sent by your browser
- The path of the requested resource and a timestamp
- A
Refererheader, if your browser sent one
This data is held by the host, governed by its own privacy policy, and is not made available to, aggregated by, or analysed by the author of this site.
The cleanest privacy policy is the one that has nothing to disclose. This site aims for that ideal.
What runs in your browser
§ III — Math, code, and external links
What runs locally, and what doesn’t.
A statistics blog has predictable visual needs. Here is what is rendered locally — without contacting anyone — and what is not used at all:
— Used, locally —
- MathJax / KaTeX — typesets equations; no network calls after page load.
- Highlight.js / Prism — colorizes code blocks; bundled with the site.
- Quarto’s built-in search — runs entirely in your browser against a local index.
— Not used —
- Giscus, utterances, or other GitHub-based comment systems
- YouTube, Vimeo, Twitter / X, or other tracking embeds
- Newsletter sign-up forms, Mailchimp, ConvertKit, etc.
- Advertising or affiliate networks
External links are plain <a> tags. Following them is your decision and subjects you to the destination’s own policies, not this one.
Comments — the one exception
Individual blog posts (under /statistics, /medicine, and /nutrition) load Disqus, a third-party commenting service, at the foot of the article. It is the only third-party widget on the site, and it is not loaded on the home page, the listings, or any non-post page.
When a post page loads, Disqus loads with it: it runs its own JavaScript and may set its own cookies and process data — your IP address, and your Disqus account details if you sign in to comment — under Disqus’s privacy policy, which is outside this site’s control. To prevent it entirely, block disqus.com in your browser; the article itself renders fully without it. Comment content is public and governed by the Comment Conduct Policy.
A note on fonts
§ IV — Fonts
Where webfonts are used, they are self-hosted alongside the site’s other static assets so that no font provider receives a request from your browser. (If a future post embeds a font from a third-party CDN, that exception will be noted here.)
Your rights, in brief
§ V — GDPR, CCPA, and the rest
Statutory rights.
The GDPR, the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar regimes grant rights of access, correction, deletion, portability, and objection over personal data held about you. Exercising these rights against this site is straightforward, because:
There is no personal data on file to access, correct, delete, port, or object to.
For data the hosting provider may transiently hold in its server logs, please consult that provider’s privacy policy directly. Likewise, any comments you post are held by Disqus — exercise access, correction, or deletion rights over them through your Disqus account or Disqus directly.
Children
§ VI — Children
The site is a general-audience publication on statistical methodology. It is not directed at children under 13, does not knowingly collect data from anyone, and therefore cannot knowingly collect data from a child.
Changes to this policy
§ VII — Revisions
If anything material changes — for instance, if a future post adds a third-party embed, or if the host changes — that change will be reflected on this page and noted in the page’s commit history on GitHub. The “Effective” date in the masthead will be updated accordingly.
Contact
§ VIII — Contact
Questions, corrections, or concerns.
Write by opening an issue on the site’s GitHub repository or by reaching the author through the channels listed on the site’s About page. There is, by design, no contact form to fill out here.
Last reviewed r format(Sys.Date(), '%B %d, %Y'). This policy is itself licensed under CC BY 4.0; feel free to adapt it for your own static site.
Comments