The questions, and the actual answers.

No. Not one. There is no consent banner on this site because there is nothing to consent to.

There is no cookie and no stored identifier. The visitor id is a hash of a secret salt, the current Sydney date, your IP address and your user agent. Your IP is used to compute that hash and is then thrown away. It is never written down.

Because the date is part of the hash, the id changes at midnight Sydney time. Tomorrow you are a different visitor to this site, which means there is no way to follow anyone across days even if I wanted to.

The one clever use of it is honest: the live feed on the stats page can mark which row is you, because the same hash gets recomputed for your request and compared in the query. The hash itself never leaves the server. Your browser only ever receives a yes or no.

Nine fields per pageview, and that is the whole list. No scroll depth, no mouse movement, no session recording.

• visitor_idA hash, described below. Not an account, not an ID you carry.
• pathWhich page. Query strings are dropped before storage.
• referrer_hostThe site you arrived from, host only. Never the full URL.
• countryFrom the edge request header, never an IP lookup.
• deviceOne of desktop, mobile or tablet.
• browserBucketed from the user agent. Anything unknown becomes Other.
• osSame source, same bucketing.
• utm_sourceOnly if a link you clicked carried one.
• eventNull for a plain pageview.

Four companies, because the site has to run somewhere and email has to be delivered by someone.

And everyone. The dashboard at /stats is public, on purpose — it is the honest version of showing my work. The next question covers what that actually puts on screen.

• VercelHosts the site and serves every request.Standard server logs, plus the country header the tracker reads.
• NeonRuns the Postgres database.The nine fields listed above, nothing else.
• ResendDelivers contact-form messages to my inbox.Your name, email and message, in transit.
• Google GeminiAnswers the chat box on the site.Whatever you type into it, sent to the model to get a reply.

Yes, and this is the part worth reading twice. One panel on the public dashboard lists recent pageviews individually rather than as totals: the page, the country, the device, and the time to the minute, refreshed every ten seconds.

It never shows your IP or your city, and the identifier behind it is the same salted hash that resets at midnight. But this is a quiet site. On a slow day a single row can still be recognisable to someone who already knew you were about to visit. If that bothers you, that is a reasonable thing to be bothered by, and the address at the bottom of this page reaches me.

I get your name, email address and message, delivered to my inbox through Resend. They are not written to the database. I use them to reply to you and nothing else: no list, no newsletter, no forwarding.

What you type is sent to Google Gemini to generate a reply, the same way any chat assistant works. Do not paste anything into it you would not want leaving this site, because it does leave this site.

One thing, and only if you find the hidden game: whether you muted its sound. That is a localStorage flag called mv-dgn-muted. Clearing your site data removes it and nothing else breaks.

No. There is nothing to sell that anyone would want, and I would not sell it if there were. If you ever send me something sensitive by accident, email me and I will delete it.

The contact and chat endpoints are rate limited, the database is not exposed to the browser, and the analytics data has nothing personal in it by design. That said, no system is airtight, and anyone who tells you otherwise is selling something.

The date at the top moves and the page changes with it. There is no mailing list to notify, because there is no mailing list.