Privacy

This site, the portal and the probe collect different things, so they are set out separately.

This site

No cookies. No advertising trackers. The site uses one third-party service: Ahrefs Web Analytics, to count visits.

Every page loads a small script from analytics.ahrefs.com. When you view a page, Ahrefs receives the page address and title, the page you came from if your browser sends it, your screen size, your browser’s user-agent string and language setting, and your IP address, from which it works out your country and city. According to Ahrefs’ own description, it sets no cookies, never stores the raw IP address, and counts unique visitors using a hash whose salt is deleted every 24 hours, so a visitor cannot be followed from one day to the next.

Everything else, the stylesheet and any images, comes from this server. The site sends your browser a Content-Security-Policy header telling it to refuse anything from anywhere except this server and Ahrefs. There is no cookie banner because there are no cookies to consent to.

The web server also keeps a standard access log: your IP address, the time, the page requested, the referring page if your browser sends one, and your browser’s user-agent string. The log is kept for 14 days and read only to deal with faults or abuse and to count visits.

This site runs on a server we operate at Hetzner in Nuremberg, Germany.

The portal

The portal is separate from this site and does use a cookie: a session cookie that keeps you signed in. It is needed for the portal to work and is not used for anything else.

When you sign up, the portal stores your email address, which is how you sign in, a display name if you give one, and your password, kept only as a one-way hash. Sign-in attempts are logged, to limit password guessing. It also stores what the probes on your clients’ machines send.

The portal is served through Cloudflare, which handles the connection between your browser and the portal. The portal, and the collector the probes report to, run on servers in Germany.

The probe

What each probe sends is listed on How it works. None of it is about the people using the machine. The fields most likely to identify someone are the hostname and domain name: a machine called JANES-LAPTOP tells you whose it is.

Contact

Questions about any of this: admin@alnalabs.net, or write to SCDC Limited, The Mansion House, Pickwick Road, Corsham, Wiltshire, SN13 9BL.