Privacy policy

Scope

This policy covers posluns.ca, every posluns domain that redirects to it, and the project sites grclibrary.ai, aiqt.ai, cleanlanguage.ai, auditthis.ai, opfiles.ai, and secureconfig.ai. Sites I link to, such as GitHub, LinkedIn, and ORCID, have their own policies.

What the sites collect

The sites are static pages. They have no accounts, no sign-up, no comment or contact forms, no search that leaves your browser, and no advertising, and they set no cookies of their own. Nothing you type on a page is sent anywhere.

What Cloudflare processes

Cloudflare hosts and delivers the sites. Like any web host, it receives the technical details of each request, such as your IP address, your browser's user agent, and the page requested, in order to deliver the page and protect the site. Its handling of that data is set out in Cloudflare's privacy policy. The sites use 4 Cloudflare features:

• JavaScript Detections (bot protection) runs a small script that checks whether a visitor is a browser or an automated client. Cloudflare stores the result in the cf_clearance cookie.
• Web Analytics runs a script that reports page views and performance to Cloudflare. Cloudflare states that it uses no cookies or local storage and does not fingerprint individuals.
• Rocket Loader defers scripts until a page has rendered, so pages appear sooner.
• Speed Brain asks your browser to prefetch the page you are most likely to open next, from Cloudflare's cache.

Cloudflare's documentation for Rocket Loader and Speed Brain describes no cookies and no collection of personal data.

Cookies

Cloudflare may set these cookies, which it classes as strictly necessary to provide its service. None is used for advertising.

• cf_clearance: stores the proof that your browser passed Cloudflare's check, so that you are not checked again. It is set with SameSite=None; Secure; Partitioned.
• __cf_bm: set where Cloudflare's bot protection is active; it holds information Cloudflare uses to calculate its bot score, encrypted so that only Cloudflare can read it, and expires after 30 minutes of inactivity. Cloudflare generates a separate __cf_bm cookie for each site and states that it does not track users from site to site or from session to session.

Cloudflare documents these cookies on its cookies page. You can block or delete them in your browser; the pages still load, though Cloudflare may then check your browser again.

What I see

In Cloudflare's dashboard I see aggregated traffic figures for each site, such as page views, top pages, referring sites, and countries. Cloudflare's security reports also show me requests that its protection challenged or blocked, which can include the requesting IP address. I use this information only to run and secure the sites.

If you email me

If you write to jeff@posluns.ca, I receive what you send, including your email address, and use it only to reply and to deal with your message. Vulnerability reports are handled under the vulnerability disclosure policy.

Sharing

I do not sell or share information about visitors. Cloudflare processes request data as the sites' hosting provider, under its own privacy policy.

Questions and requests

For a question about this policy, or a request about information I hold about you, email jeff@posluns.ca. I read messages in English and French. For data Cloudflare holds, see its privacy policy.

If this policy changes, the date at the top changes with it.