robertobonfa.dev privacy

This site runs on a machine in my home, behind a tunnel. There is nobody else's service in between, apart from what is written below.

Visits

The visit count is done by Umami, which also runs on a machine at home: no cookies, no profiles, nobody followed from one site to another. It records the page opened, where the visit came from and the kind of device, in aggregate form. Whoever reads leaves nothing that would identify them a second time.

Comments

The comments under the diary posts are served by Remark42, also on a machine at home. Anyone who only reads leaves nothing.

Anyone who comments leaves four things: the name shown next to the comment, the email address - which appears nowhere and only serves to recognise someone coming back - the text of the comment, which is public, plus the IP address it came from. It all sits on that machine, along with a session cookie that keeps people recognised between one comment and the next.

To sign in you can use Google, Apple or email. The site never calls them on its own: the page stays as it is until "sign in" is tapped. From that moment the privacy policy of whoever does the authentication, Google or Apple, applies as well. Anyone choosing email goes through nobody.

Comments can be deleted, and the profile with them: one line to contact@robertobonfa.dev is enough.

Who else sees any of this

Nobody. There are no ads, no comment analytics service, no sharing with third parties. There is no newsletter and nothing is sent to anyone.

How long it stays

Comments stay as long as the post stays, or until someone asks for them to be removed. The visit count keeps aggregate data and has nothing to delete, because it recognises nobody.

The apps

The four iOS apps each have their own privacy policy, because they collect different things - or rather, they collect nothing. They live on their own pages, inside this site.