Privacy policy

Third parties that can load

Hosting is Cloudflare Pages, which serves every file and keeps short-lived request logs for delivery and abuse prevention. Beyond that there are four outside services, and three of them wait for consent:

Advertising on this site

This site runs one ad network: Adsterra. Two units are on the page — a native banner under the article text, above the footer, and a Social Bar pinned to the bottom edge of the viewport. The Social Bar has a close button; once you use it the choice is stored in localStorage as twb-ads-closed, and the bar is not injected again on later visits. Adult ads are switched off in the Adsterra account for this website, and the site carries no Google AdSense tag and no other advertising script.

Both ad scripts exist in the page as strings and only become <script src> elements after Accept. A visitor who has not accepted therefore sends no request to Adsterra, sees no ad slot, and gets no ad cookie. A Reject changes nothing later in the session; Cookie settings in the footer reopens the banner if you want to switch.

Adsterra says in its own cookies policy that it does not collect names, emails, or billing details from visitors, and that it works with an anonymised user id, device and browser information, a timestamp, and impression and click counts. Where the law treats that as selling or sharing personal information, you can object: use the banner on this site, block or clear cookies for this domain in the browser, or use the industry opt-outs at Google Ads Settings and aboutads.info for the exchanges behind them. Adsterra keeps its own description at adsterra.com/privacy-policy.

Cookies, localStorage, and retention

The only storage this site writes itself is two localStorage keys. twb-consent holds your choice (granted or denied) with a timestamp and expires after 180 days; after that the banner asks again and the denied default applies. twb-ads-closed holds one flag recording that the Social Bar was closed, so the bar stays away on later visits until you clear site data. Neither key leaves your browser and neither is a cookie.

An inline script in the page head records a Consent Mode v2 default of denied for ad_storage, ad_user_data, ad_personalization, and analytics_storage, and turns on ads_data_redaction and url_passthrough before gtag config runs. Your choice is replayed into Consent Mode on every later visit, and the ad and recording scripts read that same stored choice, so a Reject stays a Reject. Aggregate reports in Google Analytics hold event data for up to 14 months; nothing there identifies you to us by name.

If the browser sends Global Privacy Control (navigator.globalPrivacyControl), the banner stores denied without asking, so no measurement, no recording, and no ad request happens. Do Not Track is not a signal we can read reliably, so it is treated the same way in spirit: nothing in the table above loads until you press Accept.

Legal basis, rights, and changes

The legal basis for the stored choice is consent, held on your device. For Google Analytics, Microsoft Clarity, and Adsterra the basis is that same consent: while it is missing or denied the ad tag and the recording tag are never injected, and measurement runs with storage denied. If you email us, the basis for reading that mail is answering the request. We do not sell personal information ourselves and we do not build an advertising profile.

You can ask for a copy or deletion of mail you sent us by writing to the same address. For data held by the services above, their own pages carry the request routes: Google, Microsoft, and Adsterra.

A change to this policy is a change to this page, with a new checked date. If a tag is added or removed, this page is updated in the same change, so the list above always matches the built site.

Keep going