Privacy, in plain language.

Basic measurement

Cloudflare Web Analytics measures visits, page views, country, referrer and performance without saving a visitor ID or using fingerprinting. Our own event counts record page paths, broad country, referrer hostname, a traffic category and fixed interaction names. We do not store your IP address, browser fingerprint, full referrer, search terms or free-text event fields.

Cloudflare processes ordinary request metadata to host and secure the site. Basic visits are not exact unique people or returning visitors. Ad blockers and browser privacy settings can reduce coverage.

Optional anonymous measurement

Only if you choose “Allow anonymous measurement”, this browser saves a random first-party visitor ID for up to 30 days and a session ID in session storage. Sessions expire after 30 minutes of inactivity. This lets us estimate sessions, returning visitors and notification conversion among consenting visitors. It is not linked to your OpenAI account and is not shared across sites.

Choosing “Basic only” removes these IDs from this browser and stops sending them. This does not identify or erase earlier anonymous records. Do Not Track and Global Privacy Control turn optional measurement off. Measurement choices and timezone preferences remain in your browser so the site can respect them.

Email alerts

When email sending is activated, we collect only your email address, selected alert types, consent version and subscription/confirmation timestamps. We use a confirmation link to verify ownership. An optional consenting visitor ID can attribute the signup; its absence does not affect subscription.

Reset Watch uses Cloudflare for storage and Resend for sending once configured. No tracking pixels or link tracking are requested. Every alert includes an unsubscribe link. Unsubscribing removes the email address from the active subscriber record. Confirmation links expire after 48 hours; expired pending addresses are removed by the scheduled maintenance task.

Subscriptions are currently not collecting email addresses until the sender is connected. The operator can access records through the protected Cloudflare dashboard. Public data endpoints never include email addresses, tokens, source-document bodies or management notes.

Data and contact

Anonymous event records are retained for up to 90 days for growth analysis, then removed by scheduled maintenance. Public source records remain as evidence. For privacy questions, use the Salim Notes site.

Last updated October 3, 2026. This notice describes the implemented data flow; it does not claim legal certification.