privacy

a short, specific account of the data this site handles.effective 13 October 2026 · written for humans
tinywifi.cc does not use advertising analytics or build a profile of your activity across other sites. Its own analytics code does not set a tracking cookie.

what is collected

  • page viewsthe requested path and the page title are sent to this site’s own analytics endpoint
  • performance measurementsCLS, FCP, INP, LCP, and TTFB values help identify slow or unstable pages
  • ordinary request logsCloudflare and Nginx process request time, URL, response status, IP address, and user-agent information needed to deliver and protect the site
  • security reportsthe browser may send a blocked resource URL and violated policy directive when the Content Security Policy stops something
  • messages you sendemail or other contact details are handled only when you choose to contact tinywifi

what is not collected

  • no advertising profilethere are no ad pixels or cross-site behavioral profiles
  • no analytics fingerprintscreen size, full user-agent fingerprint, and referrer are not forwarded to GoatCounter by the analytics endpoint
  • no redaction contentsthe local redaction tool runs in your browser and sends neither page-view analytics nor the text you paste
  • no PGP workbench contentsencryption and verification input remains in your browser

where data goes

Cloudflare delivers and protects the public site. The origin runs on a VPS behind Nginx. A same-origin endpoint forwards only the page path and title to GoatCounter; the visitor's connection is not made directly to GoatCounter. Performance and policy reports stay in the site's private Loki/Grafana logging stack.Cloudflare may set narrowly scoped security cookies when it needs to distinguish legitimate traffic from abuse. Those are infrastructure protections, not advertising cookies.

retention

  • application and policy logslocal Loki data is retained for seven days
  • origin access logsNginx logs rotate daily and retain up to fourteen rotated days
  • aggregate page countsGoatCounter stores aggregate counters until they are manually removed
  • contact messagesmessages are kept only as long as they remain useful for the conversation, disclosure, or project they concern

your choices

You can block the analytics request without losing site functionality. JavaScript is needed for interactive tools, search, and color-mode controls, but the public writing remains readable without it. Use the local redaction tool before sharing a report when a message contains identifiers or secrets.

contact

Questions, corrections, or deletion requests can be sent to me@tinywifi.cc. Sensitive messages can be encrypted with the published PGP key.