Privacy

Messages

Guestbook submissions contain a nickname, a message, and permission to publish after approval. Pending and rejected notes are visible only to the authenticated admin. Approved notes are public. Private letters are stored in a separate private inbox; there is no control that turns a private letter into a public note.

A private letter may include a name and reply email if you choose to provide them. Letters are retained for up to one year and removed by the publishing runner. If the runner is unavailable, deletion can be delayed. Guestbook notes remain until the owner deletes them. This website does not automatically email letter contents.

Security checks

When the message forms are enabled, Cloudflare Turnstile performs a security check. The server validates its token before saving a message. A short-lived keyed hash of a network address is used for rate limiting. Raw addresses are not stored in the application’s rate-limit table; counters expire after 15 minutes and are cleared by the runner. These checks do not guarantee anonymity.

Pageviews

Pageview counting is currently off. When enabled, only a UTC date, an approved public pathname, and an aggregate count are stored. These are pageviews, not unique people. The application does not store visitor identifiers, full referrers, query strings, form text, or browsing profiles for analytics. Counts can include repeat visits and automated requests.

Browser storage & accounts

A motion preference may be saved in local browser storage. Visitors do not need accounts. The owner’s admin uses authentication cookies. Private responses and drafts are not shared through public caches.

Hosting & backups

Vercel runs this website. Neon stores its PostgreSQL data and private media in S3-compatible object storage. The domain and DNS are managed through Alibaba Cloud. Providers may retain operational logs under their own policies. Private backup exports are stored in this website’s private GitHub repository as restricted artifacts for seven days. Backups can contain private correspondence; deleting live data does not immediately delete older backups.

Removal requests

A deletion contact has not been configured yet. Please avoid sending sensitive information until a contact is published.