What This Site Knows

Almost nothing, and nothing is kept unless you choose to contact me. There is no account to create, no newsletter, and no comment box. The free website check is explained in its own section below: it works on the address you give it, and keeps nothing once it is done apart from a few minutes in the server's memory.

The site sets no cookies for visitors, uses no local storage, runs no analytics or tracking pixels, and loads no fonts, scripts or images from anyone else's server. There is no consent banner because there is nothing to consent to. The one cookie the site can set is a sign-in session for me, the owner, when I sign in to the admin area. You will never be issued one.

The contact form is one form with one button. It is on the contact page, and under the results of the website check. Nothing you type into it leaves your device until you press Send; close the tab before that and it is gone.

Pressing Send posts your name, your email address, what you said you need, the budget range if you picked one, your message and which of those two pages it came from to a private Discord channel that only I can read, so I see it wherever I am. Nothing is stored on this site. There is no database behind it and no copy kept here, so that channel holds the only copy. Discord is a third party, and the message sitting in that channel lives under their terms as well as mine.

If you would rather not use the form at all, the same page shows my email address, and an email touches nothing on this site.

The website check sends the address you type to this site's server. The server then fetches that page the way a search engine would, following any redirects to wherever they lead. It also fetches a few small things from the site: its robots.txt file; its sitemap, at the usual addresses and at any address its robots.txt names, which can be on another site; its site icon if the page doesn't name one; its share image if the page gives that as a plain http:// address; and one or two other versions of the address (such as without https, or with or without www) to see where they redirect. A page that is slow to answer is fetched a second time to time it again, a request that gets no answer is tried once more, and if you typed the address without https:// and the secure version can't be reached at all, the page is fetched over plain http instead. Every one of those requests says what it is: its User-Agent names this site. None of the page's scripts are run.

The results come back to your browser and are shown on the page. This site never writes the address you checked to a database or a log, and nothing is sent to me: I do not find out that you ran it, or which site you checked. So that checking the same address twice in a row is quick, the server holds the finished result in its memory for up to five minutes and then forgets it. To stop the check being used to flood other people's sites, it also keeps a short count of recent checks per IP address in memory, which is never written down and which it clears out as entries pass ten minutes old. If the check itself breaks on the server, a one-line note of the kind of error goes to the host's error log, without the address or anything about you.

Like any request to the site, running a check appears in the host's ordinary server logs, described below. The address you type travels inside the request, not in the page's link, so those logs show that a check was run but not which site. The one exception is a link with the address already in it (one ending /website-check?url= and an address): opening a link like that records it like any other page address, address included.

Only if you press the button to run Google's speed test too, the server also sends the address to Google PageSpeed Insights, which loads the page and measures it. That request goes from this site's server, not from your browser, so your IP address is not sent to Google, and what Google does with the address it receives is under Google's terms and privacy policy. Google's answer is held in the server's memory for up to ten minutes, for the same reason as above, and then forgotten.

The form under the results is optional. It starts with the address you checked and the names of anything worth fixing, which you can change or delete. If you choose to send it, that summary goes with your message like any other, as described above; if you do not, it goes nowhere.

A message sent through the form arrives in a private Discord channel that only I can read, and that channel holds the only copy of it. An email to hello@denneystudio.com arrives in my mail account. Either way I hold it so that I can reply to you and keep a record of what we agreed, I do not add you to a mailing list, and I do not pass your details to anyone else.

I keep enquiries for as long as they are useful, and correspondence relating to paid work for as long as I am required to keep business records. You can ask me to delete anything I hold about you and I will, unless I am legally required to keep it.

There is a single sign-in cookie, and it exists so that I can sign in to the admin area of this site without typing a password every time. It holds a signed token proving the session is mine, nothing more: no name, no email, nothing about you. It lasts a few days and then expires.

It is set only after a successful sign-in, which only I can complete. Visiting any page as a reader sets nothing, which is why there is no consent banner.

The site is hosted by a third-party provider that, like every web host, records requests made to it. Those logs typically include an IP address, a timestamp and the page requested, and they exist so the host can run and secure the service. I do not use them to build any profile of you, and I do not combine them with anything else.

Under UK data protection law you can ask what I hold about you, ask for it to be corrected or deleted, and object to how I use it. In practice that means the message you sent through the form, sitting in the Discord channel it was delivered to, and the emails between us, because there is nothing else.

Email hello@denneystudio.com and I will answer within a month, usually far sooner. If you are not satisfied with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.