No cookies, no accounts. Analytics run on our own server, not on a tracking network: this site loads a cookieless self-hosted Matomo instance (stats.ali.as - the same operator as this site) plus its own first-party counter. Nothing is shared with ad networks, data brokers or any third party.

What is stored for the visit counts: your IP as a salted hash (an HMAC keyed by a server-side secret), so raw addresses are never written. Honest scoping: the hash is pseudonymous, not anonymous - the same hash identifies "a visitor on this line" across the counter, and the secret lives in the same database as the counts, so whoever holds full database access could correlate hashes with known IPs. We store no raw IPs, never link the hash to anything beyond page-view counting, and a deliberate pepper rotation invalidates all old hashes (old hashes are never re-hashed - a hash cannot be reversed into a new one).

Sessions are random ids continued while the same visitor keeps browsing (30-minute gap). For each counted page we also store browser/os/device class, the referrer host and URL (truncated, inbound only), the first Accept-Language tag, and - via a beacon - how long the page was visible and the viewport size, matched to the same hash. The Matomo instance runs with cookies disabled. Rows older than a year are deleted daily. Forms (comments, ratings) store a nickname and text - plus an anti-spam proof-of-work computed in your browser, no account needed. Don't post anything in comments you wouldn't sign with your real name.