Privacy notice
This site is operated by Martin Hicks, based in Manchester, UK. I operate in accordance with the Data Protection Act 2018 (UK GDPR).
Last updated: September 2026.
What this site collects
This site uses no cookies and has no contact forms, so there's no banner to click. It does run Altino to count visits and see which pages get read. It's cookieless and never tracks you across sites. Altino is my data processor for this: it handles the data on my behalf and for no purpose of its own.
- No cookies, no local storage, no fingerprinting. Nothing is saved on your device.
- What's measured: the page you visited (the path only, with any query string stripped), the referring site (its domain only, and only when it wasn't this site), your browser and device type, and an approximate location.
- That location comes from CloudFront, the content delivery network in front of the analytics endpoint. It works out a rough country and city at its nearest edge and passes them along as request headers. Your IP address is never looked up against a geolocation database.
- Your IP address isn't stored. It's combined with your browser's user-agent string, the date and a secret key, then put through a one-way hash, and that result is what counts you as one visitor for the day. The secret key is doing real work there: without it, anyone holding a known address and user agent could compute the same hash themselves and check whether you'd visited. The date goes in too, so the value changes daily and can't follow you from one day to the next. The record holding it deletes itself after 24 hours.
- What's kept is aggregate counts by page, day, country, city, browser and referrer.
- Do Not Track is honoured. Send the signal and this site records nothing.
- Why: legitimate interest in understanding how my own site is used. Nothing is sold or shared with third parties.
Hosting
The site is hosted on Amazon Web Services (S3 and CloudFront). AWS may log standard access information such as IP addresses, request timestamps, and user agent strings as part of normal infrastructure operation. These logs are used solely for security monitoring and are not shared with third parties. AWS data centres may be located in the US and EU.
For more information, see the AWS Privacy Notice.
The one request that leaves for somewhere else
The header shows how many people have starred Dynoxide, and that number is read from GitHub's public API when a page loads. GitHub sees the request the way it sees any visit: your IP address, and which browser made it. Nothing is sent about who you are or what you were reading, no cookie is set, and the request goes nowhere else.
The page ships a figure from the last time the site was built, so it has a number whether or not that request succeeds. If your browser sends Do Not Track the request is never made and the built-in figure is what you see, which keeps it a little out of date and sends nothing anywhere.
External links
This site links to third-party services including GitHub, npm, and crates.io. These sites have their own privacy policies and I have no control over the data they collect.
Your rights
Under UK GDPR, you have the right to request access to, rectification of, or deletion of any personal data I hold about you, to ask that its use be restricted, and to object to the processing. The analytics keep only aggregate totals and nothing that identifies you, so there's unlikely to be anything to act on - but ask anyway if you want to. If you're unhappy with the answer you can complain to the Information Commissioner's Office.
Contact
For questions about this privacy notice: hello@martinhicks.dev