Skip to content

Privacy

Last updated November 9, 2026

This is a personal site that runs on a server in my house. It doesn't set cookies, and I don't sell or share anything about you. This page lists everything it collects and where it goes.

Analytics

I count visits with Plausible, which I run myself at plausible.joekarlsson.io, so the numbers never leave my hardware. It records the page you viewed, the site that sent you, your browser, operating system, device type and country. It also counts clicks on outbound links, file downloads and a few buttons, plus JavaScript errors so I can fix them. Plausible doesn't use cookies or store your IP address: it mixes your IP and browser into a hash with a salt that's thrown away every 24 hours, so I can tell visits apart within a day and never across days.

Newsletter

If you subscribe, I keep your email address in listmonk, a newsletter app I run on my own server. Before anything else you get an email asking you to confirm. I only use the address to send the newsletter. Each email records whether you opened it and which links you clicked, so I can remove addresses that never read anything. The emails go out through Brevo, a mail delivery service, which handles your address only to deliver them. Every email has an unsubscribe link. If you want your address deleted outright, not just unsubscribed, ask me and I'll delete it.

Hosting and Cloudflare

Every request goes through Cloudflare, which caches the site and blocks attacks. That means Cloudflare sees your IP address and the pages you request, the same as any web host would. Cloudflare also adds its Web Analytics script, which counts page views and load times without cookies. Fonts and images all come from my own server: nothing on a page loads from Google.

Videos and embeds

  • YouTube. A video shows a thumbnail saved on this site. Nothing loads from YouTube until you press play. Then the player comes from youtube-nocookie.com, and Google's privacy policy applies to what you watch.
  • Playable projects. Some pages on /work and a couple of posts embed projects hosted on GitHub Pages. They only load on a desktop-sized screen, and GitHub sees your IP address when they do.
  • Amazon links. Some posts have Amazon affiliate links. If you click one, Amazon sets its own cookies to credit me with the sale.

Cookies and browser storage

This site sets no cookies. If you press the button that pauses animations, your browser remembers that choice in local storage. It stays on your device and never reaches me.

Your rights

You can ask what I have on you (at most, your email address), ask me to correct it, or ask me to delete it. That applies wherever you live, including the EU, UK and California, and I'll handle a request within 30 days. The legal basis for the newsletter is your consent, which you can take back at any time by unsubscribing.

Contact

Email questions or requests to [email protected], or reach me through the contact page. If this policy changes, I'll update the date at the top.