Site analytics and privacy

This page describes the analytics shared by the sites that link to it. Each site uses cookieless page counts with Umami, optional PostHog analytics that runs only if you accept it, or both. Every site also has the minimal request log the web server keeps.

Cookieless page counts (Umami)

Some sites, including wolfie.gg and its demo sites, wolfxl.com and wolfsdk.com, count page views with Umami, an open-source analytics tool the site operator runs on its own server. It sets no cookies and stores nothing in your browser, so it asks for no choice. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is sent.

For each page view the site sends:

• which of its published public pages you viewed; other pages are recorded only as "other" or not at all, and sign-in, account and administrative pages never,
• the website that linked you here (its address only, without the page),
• your screen size and browser language.

The Umami server also derives your browser family, operating system, device type and approximate location (country, region and city) from the request. It does not store your IP address. To count visits it computes an identifier from your IP address, browser details and a value that changes every month, so the same browser is recognised for at most a calendar month and never across sites. The site does not send query strings, URL fragments, page titles, page text, or anything you type. Data stays on the operator's server and is reported as counts.

Browser analytics: only with your consent

On sites with PostHog analytics, nothing is sent to PostHog from your browser until you choose Accept analytics. Reject analytics is offered with equal prominence, and the Analytics settings control on each site lets you change your choice at any time. Withdrawing consent stops collection from that moment and clears the analytics session from your browser. Rejecting in one tab also stops analytics in this site's other open tabs.

If your browser sends a Do Not Track or Global Privacy Control signal, browser analytics stay off and cannot be switched on. If your browser does not let the site remember your choice, analytics also stay off.

If you accept, the site records:

• which of its published public pages you viewed, in order, and when you left them; other pages are recorded only as "other" or not at all,
• a small set of named actions, such as following a call-to-action link,
• the website that linked you here (its address only, without the page) and short campaign source, medium and campaign codes from the link (never free text),
• your browser family, operating system and device type, and page loading performance measurements.

The site does not record:

• query strings or URL fragments, apart from those campaign codes,
• page titles, page text, or what you type into forms or search boxes,
• your name, email address, or any account identifier,
• your IP address, or a location derived from it,
• screen recordings.

The record is tied to an anonymous identifier held in this site's session storage, so it lasts only until you close the tab. It is not linked to a profile, is not joined across sites, and no fingerprinting is used. Your consent choice is kept in this site's local storage, and no cookies are set for analytics.

Events are sent to this site's own address, which forwards them to PostHog, the analytics service the site operator uses, after removing every request header your browser sent except the content type, so no cookies, authorization, browser details or headers carrying your IP address are passed on. Results are reported as counts of sessions, never as identified people.

Request log on the web server

Like any web server, the server that hosts these sites sees each request. For reliability and to understand which pages search and AI crawlers fetch, it keeps a reduced log line per request that holds only: the site, the page (a published page name, otherwise "other"), the HTTP method, the response status, the response size and timing, and a client class. The client class is "browser", "unknown", or the name a crawler announces about itself; it is a claim, not a verified identity.

The log never stores IP addresses, full URLs, query strings, cookies, the browser's user-agent string, or other request headers. Requests carrying Do Not Track or Global Privacy Control, sign-in, account and administrative pages, and the analytics endpoints themselves are not logged at all. Log lines are deleted after at most 30 days; only per-day aggregate counts are kept longer.