Privacy

In this policy, “we” means Codecrumbs. You can reach us about anything here at info@codecrumbs.com.

Codecrumbs doesn’t use tracking cookies, doesn’t have accounts, and doesn’t track you across visits or across the web. There is no cookie banner because there is nothing to consent to.

The site is hosted by Cloudflare, which may set strictly necessary cookies for bot protection and security. They can’t identify you and aren’t used to track you.

What we collect

We use Cloudflare Web Analytics, a cookieless measurement tool from our host, to see which pages are read and how fast they load. It records page views, the site that linked you here, your approximate region, load timing and the type of device. It sets no cookies and gives you no identifier.

Likes and view counts

Each post shows how many people liked it, and we count how many times each post is read. Your browser remembers which posts you liked, so you can like each one once. We only add up the totals per post, and nothing about you is stored for likes or reads. When you tap like, Cloudflare Turnstile checks in the background that a person tapped it, so bots can’t fake likes. Nothing loads from it until you tap, it sets no cookie, and it keeps nothing for us (see Cloudflare’s Turnstile Privacy Addendum). If you opt out of analytics below, your reads aren’t counted. When you use the Share menu we count which post and which platform you picked, and nothing about you.

How the site is used

To learn which explanations and demos help, we record a few things you do on a page: the values you try in the demos, how far down the page you read and how long it was open, your screen size (phone, tablet or desktop), which of our buttons you use (print, copy code, the full guide and the cheatsheet), and the name of any other site you follow a link to, such as youtube.com. The things you do on one page share a random number, made when the page opens and forgotten when you leave it, so they can’t be linked to your other visits or to you. Your IP address isn’t recorded. This is kept for three months, and if you opt out of analytics below, none of it is sent.

Separately, when a page isn’t found, our server notes its address and the name of the site that linked to it, so we can fix broken links. That note holds nothing else, and it’s made even if you opt out. We may also look at public posts that link to our articles, for example on Bluesky or Hacker News, to see where they’re discussed. We don’t keep them.

Content from other sites

The “Browser support” sections show data from webstatus.dev, a Google service, which we fetch when we build the site, so your browser doesn’t contact it unless you follow its link. If a post has a YouTube video, nothing loads from YouTube until you press play. Then the video comes from youtube-nocookie.com, and YouTube’s privacy policy applies.

What stays in your browser

Your light or dark theme choice, which posts you liked (so the heart stays filled) and, if you opt out below, your opt-out. They are stored on your device and never sent to us.

What we don’t collect

Cookies for tracking, names, email addresses (unless you email us), IP address logs (apart from the short records Cloudflare’s security systems keep of requests they block), returning-visitor tracking, advertising data, or anything we could sell. We don’t sell data to anyone.

Where your data goes

Two companies process data for us: Cloudflare (hosting, security, and the counts and analytics described above) and Google (our email, through Google Workspace). Both are based in the United States and certified under the EU-U.S. Data Privacy Framework and its UK Extension, which the EU, the UK and others in Europe recognize as protecting data to an adequate standard. Analytics data is kept no longer than 12 months. Totals such as “1,000 page views this week” may be kept longer because they can’t identify anyone.

Why we’re allowed to do this

We rely on our legitimate interests: understanding, in aggregate, which articles and demos are useful (analytics and site events), keeping the site and its like counts safe from abuse (Cloudflare’s bot checks and security cookies), and replying to people who email us. We’ve checked that these don’t override your rights: the data is minimal, it can’t follow you from one visit to the next, and you can opt out. Business records such as invoices are kept because the law requires it. No automated decisions are made about you, and there is no profiling.

Opt out

You have the right to object to anything we do on the basis of our legitimate interests. For analytics, the button below does it straight away. For anything else, email us and we’ll stop unless we have a compelling reason, which we’ll explain.

You can turn analytics off for this browser. It takes effect straight away, and the choice is stored on your device and kept on every visit from this browser. If you clear your browser storage, switch browsers or browse privately, you’ll need to opt out again.

Your rights and contact

You can ask to see, correct, delete, restrict, move or object to the processing of any personal data we hold about you, and we’ll answer within four weeks. You can also complain to a data protection regulator, such as the one where you live. You’re welcome to contact us first.

Contact: info@codecrumbs.com. Emails are handled in Google Workspace and kept only to reply and follow up. They’re deleted within about six months of the last message in the conversation, or 12 months after it if we’re still dealing with your request or working together (for example on a sponsorship), unless we need them longer for a legal claim. Records the law says we must keep, such as invoices and contracts, are kept for six years after the end of the tax year they relate to.