Privacy

This page describes what happens on this site, in plain terms, without a “reviewed by” badge — nobody with a legal qualification has signed this off, the same way nobody has reviewed the rest of the site (see how this site is written).

What is collected, and when

The only analytics this site runs is Google Analytics 4 (GA4). Nothing about it is requested from, or sent to, Google until you actively choose “Accept” on the cookie banner — before that choice, and if you choose “Reject” instead, no analytics script is requested, no analytics cookie is set, and no pageview or other event ever reaches Google from this site.

Before you choose, there is no Google script on the page at all, so there is nothing to set a cookie or send anything — the banner is the only thing asking. If you later withdraw consent (see “Changing your choice” below), nothing new is recorded from that moment, and the cookies Google had set on your device are deleted. One caveat, because it is true: Google’s script sends what it has recorded in batches a few seconds apart, so a page view recorded just before you withdrew — while you were still consenting — can finish sending a moment afterwards. Nothing recorded after you withdraw is sent.

When it is running and you have consented, GA4 collects standard usage data — which pages were viewed, roughly how, and on what kind of device — tied to a random identifier that Google stores in a cookie on your device. That identifier does not contain your name or email address. We do not collect your name, email address, or anything you type into this site, and we do not run session recording, heatmaps, fingerprinting, or any advertising or retargeting pixel.

Your answer to the banner — whether you accept or reject — is itself remembered in your browser’s local storage, so you are not asked again on every page. It stays on your device and this site never sends it anywhere. Clearing your browser’s data for this site removes it, and the banner will ask again.

What is not collected, and what this site does not do

No advertising, and no advertising cookies — this site carries no ads.
No data is sold, rented, or shared with anyone for marketing purposes.
No cross-site tracking, and no ad personalisation signal is ever sent to Google, consent or not.
No account system, so there is no profile of you to build in the first place.

The server side: what Cloudflare and hosting see regardless

This site is served through Cloudflare and hosted on infrastructure that, like any website, keeps ordinary connection and server access logs — the requesting IP address, the page requested, the time, and the browser’s user agent string — for operational purposes such as diagnosing faults and detecting abuse. That happens independently of any cookie choice, because it is how a web server and a reverse proxy work; it is not part of GA4 and is not affected by “Accept” or “Reject”. We are not going to claim this site “collects nothing” when that would not be true — Cloudflare processes this data under its own capacity as the site’s network provider.

Lawful basis and your rights

Storing or reading anything on your device — like GA4’s cookie — is prohibited by default under the Privacy and Electronic Communications Regulations (PECR), regulation 6(1), subject to a set of exceptions set out in Schedule A1. Consent is one of those exceptions, not the only one.

Privacy and Electronic Communications (EC Directive) Regulations 2003, reg. 6(1) — as substituted from 5 February 2026 by the Data (Use and Access) Act 2025, s.112(2) (legislation.gov.uk, checked 2026-09-10)

Read the quote

“Subject to Schedule A1, a person must not store information, or gain access to information stored, in the terminal equipment of a subscriber or user.”

The exception this site actually relies on for GA4 is Schedule A1, paragraph 2: it permits storing or accessing information on your device only if you are first given clear, comprehensive information about the purpose, and you then consent — which is the order the cookie banner follows.

Privacy and Electronic Communications (EC Directive) Regulations 2003, Sch. A1 para. 2(1) (consent) — in force from 5 February 2026 (legislation.gov.uk, checked 2026-09-10)

Read the quote

“Regulation 6(1) does not prevent a person storing information, or gaining access to information stored, in the terminal equipment of a subscriber or user if the subscriber or user— is provided with clear and comprehensive information about the purpose of the storage or access, and— gives consent to the storage or access.”

There is also a newer exception, Schedule A1 paragraph 5, in force since 5 February 2026, that lets a site collect statistics about its own use without asking first, provided (among other conditions) the data collected is not shared with anyone else and visitors are given a simple, free way to object. This site does not rely on that exception — we ask first, with the banner, rather than collecting and offering an opt-out afterwards.

Privacy and Electronic Communications (EC Directive) Regulations 2003, Sch. A1 para. 5(1) (collecting information for statistical purposes) — in force from 5 February 2026 (legislation.gov.uk, checked 2026-09-10)

Read the quote

“the person provides an information society service,— the sole purpose of the storage or access is to enable the person— to collect information for statistical purposes about how the service is used with a view to making improvements to the service, or— to collect information for statistical purposes about how a website by means of which the service is provided is used with a view to making improvements to the website,— any information that the storage or access enables the person to collect is not shared with any other person except for the purpose of enabling that other person to assist with making improvements to the service or website— the subscriber or user is provided with clear and comprehensive information about the purpose of the storage or access, and— the subscriber or user is given a simple means of objecting, free of charge, to the storage or access and does not object.”

The lawful basis for the analytics processing itself, once you have consented, is UK GDPR Article 6(1)(a) — your consent — and you can withdraw it at any time with no effect on your ability to use the site.

UK General Data Protection Regulation, Article 6(1)(a) (legislation.gov.uk, checked 2026-09-10)

Read the quote

“Processing shall be lawful only if and to the extent that at least one of the following applies:— the data subject has given consent to the processing of his or her personal data for one or more specific purposes;”

Under UK GDPR you have the right to access, correct, or ask us to erase any personal data we hold about you, the right to object to processing, and the right to complain to the Information Commissioner’s Office (ICO) if you think we have got this wrong. Because GA4 only ever runs with consent and does not collect anything that identifies you by name, there is ordinarily no personal profile tied to you for us to look up — if you have a specific concern, email us at [email protected] and we will do our best to help.

Changing your choice

Withdrawing consent is as easy as giving it. If analytics is active on this deployment, you can at any time — that reopens the same Accept/Reject banner you saw on your first visit, and your new choice takes effect immediately. If you do not see that control do anything, it is because analytics is not currently configured on this site, in which case there is no cookie to withdraw in the first place.

You can also block or delete cookies at any time through your browser’s own settings, which works regardless of any choice made here.

Contact

General questions about this policy: [email protected]. Think a page is factually wrong (which is a different thing from a privacy question): [email protected], and see /corrections for what we have already fixed.