Cookies

Nothing. No cookies, no local storage, no session storage, no device fingerprinting. The pages are static files; there is no server-side session to keep.

We load one: Google Analytics 4 (GA4), Google’s measurement script, from googletagmanager.com. It runs in cookieless mode — it writes no analytics cookie and stores no identifier on your device. Instead it sends Google cookieless, aggregated pings that carry the page URL, the referrer, an approximate location derived from your IP address, and basic device and browser characteristics. Google is a third-party processor of that data, and it may be handled outside Ireland. No advertising script is loaded, and fonts are self-hosted, so no font request leaves for a third-party host.

There is one more script, and it is not ours. While this site sits on its preview address, the network that serves it — Cloudflare — inserts its own visit-counting script into the response, loaded from static.cloudflareinsights.com(Cloudflare Web Analytics). It is in none of the files we build: it is added to the output after our server has produced it, and nothing in this repository can call it or remove it — only the account holder can switch it off in Cloudflare’s own settings. We measured a page load in a real browser: that script sets no cookie, and the browser finishes the load with zero cookies.

The consent defaults in the page head are set to denied and nothing on this site ever flips them. GA4 runs cookieless, so it never asks them to. Because nothing is stored on or read from your device, no consent requirement under the ePrivacy Regulations arises — that is why there is no banner, not an oversight.

Last updated 7 August 2026.