Privacy policy

Updated 7 September 2026.

Aggregate measurement

We store aggregate daily page requests, broad referral categories and estimated browser/bot classifications for up to 90 days. These counters exclude IP addresses, visitor identifiers, search queries and complete referrer URLs. They are not unique visitor counts or confirmed AI citations. Hosting providers may separately process technical request logs.

Performance and private worksheet

Browsers may send anonymous loading-time and layout-stability samples. We retain only daily metric categories and ratings for up to 90 days, without a visitor identifier or worksheet text. The scan worksheet keeps entries in the current browser tab and sends none of those entries to our server. Printing or saving a PDF is controlled by your browser.

Advertising

Google and its partners may use cookies or similar technologies to deliver and measure ads, subject to your region and consent choices. See Google’s partner-site data information and advertising controls. Our own aggregate measurement does not set a visitor tracking cookie.

Administration and reports

Supabase processes administrator email authentication. Administrator sessions use an HttpOnly cookie. Authentication and measurement endpoints use short-lived hashed rate-limit identifiers. AI keys are encrypted server-side; editor-submitted source notes may be sent to the selected drafting provider. Aggregate weekly reports are emailed through Cloudflare to the site owner. Server copies are kept for up to 90 days; the owner controls retention of email copies.

Questions and corrections

Contact carobdcode@gmail.com. Messages you send may include your email address and information you choose to provide.