Privacy and analytics

Short and plain, not legal advice. This is the privacy note for tonimaxx.com/demo.

What loads, and when

• On first load, before you have chosen anything, the page makes requests to two small functions that I run on my hosting provider (DigitalOcean), not to any advertiser: one finds your country to decide whether to ask about Google Analytics (see "Finding your country"), and one adds to anonymous visitor counters (see "Visitor statistics"). Nothing from Google loads at that point.
• Visitors in the United States: Google Analytics (GA4) loads by default. You can switch it off at any time with "Opt out of analytics" (button below, and in the page footer). Your browser's Global Privacy Control signal is respected.
• Everywhere else (and if the country cannot be found, or the call fails): a small bar asks first. Google Analytics loads only after you click "Accept analytics". If you click "No thanks", dismiss the bar or make no choice, nothing from Google loads.
• Global Privacy Control or Do Not Track switched on in your browser counts as opting out: no analytics, no bar. (If you later choose "Accept analytics" yourself, that explicit choice is respected.)
• When analytics is on, analytics storage is allowed. Advertising storage, ad user data and ad personalization stay denied, and Google signals and ad personalization signals are switched off. No ads run on this site.
• Events are plain site usage: page views, which sections were seen, which buttons or screenshots were opened (by name only), and whether the contact form started, succeeded or failed. No names, e-mail addresses or message text are ever sent to analytics.

Visitor statistics (first party)

Separately from Google Analytics, this page counts visits with a tiny function that I run myself. It needs no consent banner because it keeps no personal data and no identifier:

• Aggregate counters only. What is stored is, per day, totals such as page views, button and section counts, and counts per country, device type, browser, operating system, language, light or dark theme and screen size class. There is no row per visit.
• Country is found from your IP address in memory with an offline database, and the IP address is then discarded. It is not stored or logged. Device, browser and operating system are coarse classes read from your browser's user-agent text, which is also discarded.
• Referrer: only the website name you came from (for example example.com), never the address, path or search words.
• Unique visitors are estimated with a one-way hash of your IP address and browser details mixed with a secret that changes every day. The hash is fed into a small statistical sketch and is never stored, so it cannot be linked across days or back to you. The figure is approximate (about 3% error).
• No cookies from us and nothing written to your browser for this. Data is kept in private storage and read only by me.
• Opt out any time. Global Privacy Control and Do Not Track are respected (nothing is counted). "Opt out of analytics" in the footer also stops it, and so does the button below. Clicking "No thanks" on the Google bar does not, because these counters are anonymous.
• The hosting platform in front of the function may set a bot-management cookie (__cf_bm). That cookie is not set by this site and is not used for the counters.

Finding your country

• The page asks a serverless function (hosted on DigitalOcean) for the country class of your connection. The function reads your IP address only to look up the country in an offline database, answers "United States" or "ask first", and does not store or log your IP address or the answer. This site does not store it either.
• Your hosting-side network path (the serverless platform and the Cloudflare network in front of it) processes your IP address to deliver the response, like any web request. The platform may set a bot-management cookie (__cf_bm) on responses from this call and from the contact form call. That cookie is not set by this site.
• If you already made a choice in this browser, or your browser sends Global Privacy Control / Do Not Track, the country call is not made.
• IP geolocation by DB-IP.com (IP to Country Lite, licensed under CC BY 4.0: https://creativecommons.org/licenses/by/4.0/).

Cookies and browser storage

• This site sets no cookies of its own, including for the visitor statistics. Google Analytics sets its own cookies (_ga, _ga_*) only while analytics is on; opting out removes them.
• Your analytics choice is stored in this browser only (localStorage), so the bar does not come back on every visit. If you opt out of the visitor counters, a small "opted out" marker is stored the same way.
• Your light or dark theme choice is stored in this browser only (localStorage), no cookie. It is never sent anywhere.

The contact form

• When you send the form, your name, e-mail, choices and message go to Toni by e-mail (through Mailgun) and by Telegram. Nothing else receives them.
• They are not stored on this site, and not logged by the form service.
• To limit spam, the form service keeps hashed counters (a keyed hash of your network address, used for rate limits, deleted after a few days). No raw IP address is stored. The form needs no cookies and no third-party scripts.
• The form only works over the secure https page.

Who to ask

Use the contact form to ask about, or request deletion of, anything you sent me.