Skip to content

Privacy Policy

Last updated

On this page

Here’s the short version: I don’t run analytics, I don’t show ads, and I don’t want your data. This site only keeps what you type into it yourself, plus an anonymous ID if you like a note. Your browser also remembers a few settings for you.

The longer version below covers every place where data moves, including the parts I don’t control.

What I Don’t Do

There’s no Google Analytics here, no tracking pixels, no ad scripts, and no fingerprinting. I don’t sell or share anything about you, and I don’t build profiles of the people who visit.

The only analytics on this site belong to Cloudflare, and the next section explains why.

Cloudflare, My Host

This site runs on Cloudflare Pages, opens in a new tab, and Cloudflare hosts it for free. Its Web Analytics is on by default for sites it hosts, and I chose to leave it on. Think of it as my thank-you for the free hosting. Cloudflare is one of the backbones of the internet, and I’m happy to trust it with this.

According to Cloudflare, Web Analytics doesn’t set cookies, doesn’t use local storage, and doesn’t fingerprint you. It counts things like page views, referrers, countries, browsers, and page load times. In my dashboard, I only see those totals. I can’t see who you are.

Cloudflare also sits in front of every request to this site. To deliver pages and block attacks, it sees your IP address and basic browser details, like any web host does. That part isn’t mine to switch off, so read the Cloudflare privacy policy, opens in a new tab if you want the details.

Bot Checks

The contact form, the feedback form, and the anonymous guestbook form all use Cloudflare Turnstile, opens in a new tab to keep spam out. Most of the time you won’t see it at all.

Turnstile only loads when you open one of those forms. It checks signals from your browser, and my server sends your IP address to Cloudflare to confirm the check. Nothing from Turnstile is stored on my side. I only get a yes or a no.

Sending Me a Message

The contact form asks for your name, your email address, and your message. When you send it, the message goes straight to my inbox through Resend, opens in a new tab, an email delivery service. It isn’t saved in any database on this site.

Right after that, the site sends one automatic email back to the address you gave, so you know the message arrived. It comes from a no-reply address, in the language of the page you wrote from, and it doesn’t repeat your message.

Resend keeps a delivery log of the emails it sends, under its own privacy policy, opens in a new tab. I use your email address for one thing only: to reply to you.

Sending Feedback

The feedback form asks for a topic and a description. The page address, your browser details, your name, your email address, and screenshots are all optional.

Like the contact form, feedback goes straight to my inbox through Resend, and nothing is saved on this site. Screenshots travel as email attachments. Before they’re sent, my server checks that each file really is a PNG, JPEG, or WebP image under 4 MB, and renames it. Every other file is rejected.

So check your screenshots before you attach them, and crop out anything private.

Signing the Guestbook

Everything you write in the guestbook is public. Anyone who visits the page can read it.

If you sign anonymously, I store:

  • Your name, if you give one
  • Your website, if you give one
  • Your message
  • The time you posted it and the language of the page you wrote it on

If you sign in with GitHub, GitHub sends me your name, your email address, your profile picture, and your GitHub account ID. Your name and picture appear next to your entry, and the picture loads directly from GitHub’s servers. Your email address is stored with your account so the sign-in works. It never appears on the page, and I don’t use it to contact you.

Signing in also creates a session. A cookie keeps you signed in, and the session record stores your IP address and browser details. The session expires after seven days, and you can sign out whenever you like.

Every new entry also reaches my inbox as an email through Resend, with your name, website, message, and how you signed (anonymously or with GitHub). Your email address isn’t part of it.

One more detail: to keep the page fast, entries are built into the published guestbook page. When an entry is deleted, it disappears from the page at the next rebuild.

Liking a Note

When you tap the heart on a note, the site gives your browser a random ID in a cookie. It stores that ID with the note and the time, so each visitor counts once. The ID isn’t tied to your name, your IP address, or any account. Tap the heart again and the record is deleted.

I also get an email through Resend that someone liked the note. It only has the note’s title and the new total, nothing about you.

What I’m Listening To

The footer shows the last song I played, which Last.fm, opens in a new tab records for me. The site asks Last.fm for it every minute or so and keeps nothing about you.

The album cover loads from Last.fm’s image server, so that server sees your IP address, the same as with any image on the web. Last.fm’s own privacy policy, opens in a new tab covers that part.

What Your Browser Remembers

A few small things stay in your browser so the site remembers your choices:

  • rimzzlabs:theme (local storage) keeps your light or dark theme.
  • rimzzlabs:motion (local storage) keeps your animation setting.
  • locale (cookie, one year) keeps the language you picked, so the homepage opens in that language next time.
  • The better-auth session cookie only exists if you sign in with GitHub, and it keeps you signed in.
  • rimzzlabs_visitor (cookie, one year) only exists after you tap a heart on a note, and it makes sure your heart counts once.

The two local storage items never leave your device. The cookies are sent to this site only, and only so it can serve the right language, recognize your session, and count your heart once.

This site links to places like GitHub, LinkedIn, and Cal.com, opens in a new tab. Once you click through, their privacy policies apply, not this one.

Links inside my notes and pages add utm_source=rimzzlabs.com to the address. That tells the other site you came from here, and nothing more.

Your Data, Your Call

If you want to see, fix, or delete anything this site stores about you, send me a message. That includes a guestbook entry or the account created when you signed in with GitHub. Tell me which one, and I’ll take care of it.

Changes to This Page

If anything here changes, like a new form or a new service, I’ll update this page and the date at the top.