Who is responsible
This is a personal website, and I, Julian Mullins, am responsible for it as the data controller. Questions about this notice, or about any information held about you, go to hello@julianmullins.com.
What this site stores on your device
Nothing. It sets no cookies and uses no local storage or session storage, which is why there is no cookie banner.
What is collected when you visit
Two things, both handled by Cloudflare on my behalf.
- Delivering the page. Cloudflare serves this site. Like any web server, it receives your IP address and the details your browser sends with each request, such as the address of the page and the type of browser, and uses them to deliver the page and to protect the site from attack.
- Counting visits. Each page loads Cloudflare Web Analytics, which reports that a page was viewed, with details such as which page it was, the site you came from and the browser you used. Cloudflare says it uses no cookies or local storage to track visitors and doesn't fingerprint individuals by their IP address or browser. I see totals, never an individual visitor.
The Listen buttons
The pronunciation buttons use a small script from this site that asks your browser to speak the word with a Japanese voice already on your device. It only uses voices your device says are its own, so the word is not sent to any speech service, and nothing about it reaches me or Cloudflare. If your device has no such voice, the buttons don't appear.
What this site doesn't do
There are no forms, no accounts, no advertising and no tracking pixels. The fonts and pictures are served from this site, so apart from the analytics script your browser contacts nobody else while you read it.
Why, and on what basis
Delivering and protecting the site, and counting visits, rest on legitimate interests: keeping a website that works and stays secure, and knowing whether anybody reads it. Neither is used to identify you, to build a profile of you or to advertise to you.
Who else is involved
Cloudflare, Inc. acts as my processor for both of the things above. It is based in the United States, and it says it transfers UK personal data there under its certification to the UK Extension to the EU-U.S. Data Privacy Framework, and under the EU Standard Contractual Clauses with the UK Addendum. Its own account of this is on its GDPR page.
How long it is kept
Web Analytics keeps full detail for 7 days, then reduces it to a sample of around a tenth, and its figures can be viewed for six months, according to Cloudflare’s documentation. Cloudflare keeps request data for security and for running its network under its own privacy policy. I keep nothing else about visitors.
Your rights
You have rights over personal data held about you, including to ask for a copy, to have it corrected or erased, and to object to its use. This site doesn't know who you are, so there is usually nothing it can link to you, but ask at hello@julianmullins.com and you'll get a straight answer.
You can also complain to the Information Commissioner's Office at ico.org.uk, whether or not you contact me first.
Changes
If this site starts collecting anything else, this page changes first.