Privacy notice

What the site collects

Analytics, only if you allow it. Choose Analytics in the Privacy panel (the cookie icon in the taskbar). Then Google Analytics 4, run through Google Tag Manager, records which windows you open, how far you scroll, clicks to other sites and e-mail buttons, copied install commands, page errors and page speed. Each event carries the page address and title, and the address of the page you came from. Addresses are sent as your browser shows them, so any query string (the part after ?, such as a tracking tag) and any fragment (the part after #) is included. I do not record your name, your e-mail address or anything you type.

Hosting. Cloudflare hosts the site and delivers it from its network, so each request reaches Cloudflare, including your IP address, the address you asked for with any query string, the time and your browser. Cloudflare's privacy policy does not state a fixed retention period for this data, so I cannot give you one. I do not store it myself, and I have not turned on request logging or Cloudflare's own analytics for this site.

E-mail. If you write to me, or press an e-mail button, I receive what you send and keep it to reply. I keep it for two years after our last exchange.

Cookies and browser storage

Google may set other cookies if advertising tags are added later. This notice would then be updated before they go live.

Cloudflare sets a cookie only when a feature such as bot detection or a security challenge is used. I keep bot detection off, so the site sets no Cloudflare cookie. If Cloudflare ever challenges your visit for security reasons, it can set a cookie, cf_clearance, to remember that you passed.

Before you choose

Until you choose Analytics, your browser does not load Google Tag Manager at all. Nothing goes to Google, and no Google cookie is set.

Who receives your data

• Google, for Analytics, in the United States.
• Cloudflare, for hosting and delivery, through its network of data centres.
• My mail provider, for e-mail.

I do not sell data, run advertising, or make decisions about you by automated means.

Transfers

Google processes data in the United States, and its data processing terms cover transfers from the EU and UK with the EU Standard Contractual Clauses. Cloudflare is a US company that mainly stores data in the United States and the European Economic Area. It takes part in the EU-U.S. Data Privacy Framework, with its UK Extension and the Swiss-U.S. Framework, and uses the Standard Contractual Clauses for other transfers. Analytics data is sent to Google only after you consent.

Legal basis

• Analytics and cookies: your consent (GDPR Article 6(1)(a), and Article 5(3) of the ePrivacy Directive for cookies; section 30 of the Kenyan Act).
• Hosting and security: legitimate interests (GDPR Article 6(1)(f); section 30 of the Kenyan Act).
• E-mail: answering you (GDPR Article 6(1)(b) or (f)).

Your rights

Under the GDPR and the UK GDPR you can ask for access to your data, correction, erasure, restriction, or to object to processing. You can withdraw consent at any time. Under section 26 of Kenya's Data Protection Act, you can be informed how your data is used, access it, object to its use, and have false or misleading data corrected or deleted.

To use any of these rights, press the e-mail button below. You can withdraw consent now by opening the Privacy panel from the cookie icon in the taskbar, unticking Analytics and clicking Save settings.

Complaints

If you think your data has been mishandled, please e-mail me first so I can put it right. You can also complain to:

• the Office of the Data Protection Commissioner in Kenya
• the data protection authority in your country, if you are in the EU or EEA
• the Information Commissioner's Office in the UK

Children

The site is not aimed at children, and I do not knowingly collect their data.

Changes

I will change the date at the top of this notice when it changes.