privacy policy

effective date: 1-8-2026

1. information we collect

we do not ask you for any personal details, and we never sell or share what little we do see. our hosting provider, vercel, automatically collects log data such as your ip address and browser type, which is used to keep the site secure and running well.

2. analytics

we use vercel web analytics and speed insights to see how many people visit and how fast the site loads. these are cookieless: they do not store anything on your device, do not follow you across other websites, and do not build a profile of you. what we get back is aggregated — page views, referrers, rough country, device type and loading times — never anything that identifies you personally.

3. use of information

log and analytics data is used only to monitor performance and security, and to understand which pages people find useful. none of it is used for marketing, advertising or profiling.

4. cookies

we only use cookies that are strictly necessary. the one cookie we set remembers that you entered the code word for a secret location, so you do not have to enter it again. we do not use tracking or advertising cookies.

5. data security

we take the security of data seriously. our hosting provider implements robust security measures to ensure the integrity and security of their servers and infrastructure.

6. gdpr compliance

as our server logs and analytics are managed by vercel, an entity based in the united states, we ensure that appropriate safeguards are in place to comply with gdpr requirements for the transfer of data outside the eu.

7. changes to this policy

we may update this privacy policy from time to time. we encourage you to periodically review this page for the latest information on our privacy practices.

8. consent

by using our website, you consent to the data practices described in this policy.

9. contact information

if you have any questions or concerns about our privacy policy, please contact us via instagram.