Privacy Policy

Last Updated: 7 September 2026

Introduction​

Denis Olifer ("I," "my," or "me") operates https://olifer.org (the "Website"). This Privacy Policy explains how information about you is collected, used, disclosed, and safeguarded when you visit the Website.

The Website is a personal, non-commercial blog operated by me as a private individual, and is published from Homelab, a personal home lab run for household and hobby purposes. It is not a business, sells nothing, and has no customers.

Please read this Privacy Policy carefully. By using the Website, you agree to the collection and use of information in accordance with this policy.

Information I Collect​

Information You Provide​

None. The Website has no contact forms, no accounts or registration, no newsletter, and no comment system. There is no way to submit information to the Website, and no such information is collected.

Information Collected Automatically​

When you visit the Website, the following is collected automatically by the analytics software described below:

• Page data: the page visited, and the referring page
• Device information: browser, operating system, device type, screen size
• Language: your browser's language setting
• Approximate location: country, region, and city only

Your IP address is not stored. It is used momentarily, in memory, to derive the approximate location above, and is never written to the database.

No name, email address, account identity, or payment information is collected, because the Website has no mechanism to collect any of it.

How I Use This Information​

The information collected is used only to:

• understand which posts are read, and how visitors arrive at them;
• find confusing layouts and unclear explanations, and improve them;
• operate and maintain the Website.

It is not used for advertising, marketing, profiling, or automated decision-making, and it is never used to train models.

Cookies and Local Storage​

The Website sets no cookies. No essential, analytics, or marketing cookies are used, and nothing is sent to a server from your device between visits.

It does use your browser's local storage, but only for your own preferences. These stay on your device and are never transmitted:

Until you change a setting, nothing at all is stored on your device — this has been verified in a browser.

These are functional preferences, not tracking. They contain no identifier for you, are never sent to me or to anyone else, and are readable only by this Website in your own browser. You can clear them at any time through your browser's settings for this site.

There is no cookie consent banner because nothing stored is used to track, profile, or identify you.

Tracking technologies actually in use​

The complete list of tracking software on the Website is:

There is no Google Analytics, no advertising or marketing tracker, no social-media pixel, and no data broker or ad network of any kind.

Umami analytics​

Umami is an open-source, privacy-focused analytics tool. It is self-hosted by me on Homelab, on my own personal hardware, and is served from stats.olifer.org. Analytics data stays on that hardware and is not sent to any third-party analytics provider.

Umami session recording​

Umami also records a sample of visits — currently about 15% — capturing pointer movement, scrolling, and clicks, so I can see how pages are actually used.

• Recordings are captured with masking enabled ("moderate"), which is intended to obscure text content rather than reproduce it.
• Each recording is capped at five minutes.
• A similar sample builds aggregate heatmaps of clicks and scrolling.
• Recordings are stored on Homelab, are viewable only by me, and are never shared or sold.

The Website has no forms and no fields to type into.

How to opt out​

The simplest way is the switch in the footer of every page. It shows whether analytics are running for you right now, and turns them off — or back on — in one click. Your choice is remembered on your own device.

There are three other ways, and any one of them is enough. Each covers both the page-view analytics and the session recording.

1. Turn on Do Not Track in your browser. The Website's analytics honour the Do Not Track signal. If it is enabled, nothing is recorded and no request is sent — you need do nothing else here. The footer will say so.

2. Use a content blocker. Any standard blocker (uBlock Origin, Privacy Badger, Brave's shields, and similar) stops both scripts from loading. The Website is built to work normally without them, and the footer will show that analytics are blocked.

3. Set the opt-out flag by hand. The footer switch sets a value in this Website's own local storage, and the analytics stop if it is present. You can set the same value yourself from your browser's developer console (F12, or Cmd+Option+J on a Mac):

localStorage.setItem('umami.disabled', '1');

The flag stays until you clear this site's browser data. To start being counted again, run:

localStorage.removeItem('umami.disabled');

This flag is never written by the Website — it is only ever read, and only you can set it.

Third-Party Services​

• Cloudflare — delivery and hosting of the Website only. Requests pass through Cloudflare, which may log them for security and abuse prevention as part of delivering the Website, under Cloudflare's Privacy Policy. Cloudflare's own Web Analytics is disabled for this Website.

Cloudflare is the only third party involved in serving the Website, and it performs no analytics for it. There is no email service provider, no advertising partner, and no third-party analytics provider of any kind — the Umami analytics described above run entirely on my own hardware.

Data Sharing and Disclosure​

I do not sell your information, and I do not share it with anyone. There are no advertising partners, no data brokers, and no marketing lists.

Information may be disclosed only to comply with applicable law, regulation, or valid legal process, or to protect the rights, property, or safety of myself or the public.

There is no business to merge, acquire, or sell, so no transfer of data in connection with such an event can arise.

Google User Data​

The Website itself requests no access to any Google account, and receives no Google user data from its visitors.

Separately from the Website, I use Google Drive to store encrypted backups of my own personal Homelab systems, authorised through my own Google Account. That access is limited to a folder created for those backups. It handles no visitor data, is never used to access anyone else's Google account, and the data is never sold, transferred, or used for advertising, profiling, or training models — it is used only to store and restore my own backups.

Data Retention​

Analytics and session recordings are retained only as long as they remain useful for improving the Website, and may be deleted at any time. Because none of it identifies you, it cannot be traced back to an individual visitor.

Your Privacy Rights​

For All Users​

You have the right to:

• access personal information held about you;
• request correction of inaccurate personal information;
• request deletion of your personal information;
• object to the processing of your personal information;
• request a copy of your personal information in a portable format.

In practice, the Website stores no information that identifies you and operates no account system, so there is generally nothing held that could be linked to you or returned to you. If you believe something on the Website identifies you, contact me and it will be removed.

To stop any further recording of your visits, see How to opt out above — it takes effect immediately and needs no request to me.

For European Economic Area (EEA) Residents — GDPR​

Under the General Data Protection Regulation you also have the right to be informed, to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time.

Legal basis for processing: legitimate interests — understanding how a personal blog is read, in order to improve it — using data that does not identify individual visitors and that sets nothing on your device.

There is no Data Protection Officer: this is a personal, non-commercial website and does not meet the threshold requiring one. Contact me directly at the address below.

For California Residents — CCPA​

California residents have the right to know what personal information is collected, used, shared, or sold; to request deletion; to opt out of the sale of personal information; and not to be discriminated against for exercising these rights.

I do not sell personal information, and I never have. To exercise these rights, contact me at the address below.

Data Security​

The Website is served over HTTPS (TLS), and the systems behind it are maintained with reasonable care and access controls.

However, no method of transmission over the Internet or of electronic storage is 100% secure, and absolute security cannot be guaranteed.

Children's Privacy​

The Website is not directed to children under 13 (or 16 in the EEA), and no information is knowingly collected from them. The Website has no mechanism to collect information from anyone. If you believe otherwise, please contact me.

Changes to This Privacy Policy​

This Privacy Policy may be updated from time to time. Changes will be posted on this page and the "Last Updated" date above will change with them. The current version always governs.

Contact​

Questions or concerns about this Privacy Policy:

• Email: [email protected]

This policy is adapted from the MIT-licensed privacy-policy-templates by PolicyForge, modified to describe this Website's actual practices.