What this site stores, and what it sends elsewhere.

enactedvolition.github.io is a static site. There is no backend, no database, no account system and no advertising. It sets no cookies at all. This page is the complete account of the places where data does leave your browser, written to be checkable against the source rather than taken on trust — every line of it is public.

Last updated 9 November 2026

1. What I collect directly

Nothing. There is no form on this site that submits data to me, no email capture, no session, no fingerprinting script. I do not know who you are or that you visited unless you choose to contact me.

2. Hosting — GitHub Pages

The site is served by GitHub Pages. Like any web server, GitHub's infrastructure processes the request itself — your IP address, user agent and the URL requested — for delivery, security and abuse prevention. I have no access to those logs and cannot see individual visitors in them. This processing is governed by the GitHub Privacy Statement.

3. Fonts — self-hosted

Pages use IBM Plex (Sans, Sans Condensed, Mono and Serif Italic), served from this site's own /assets/fonts/ folder under the SIL Open Font License. No font request goes to Google or any other third party, so loading a page discloses nothing extra beyond the GitHub Pages request described above.

4. Analytics — off unless you say yes

If analytics is enabled on this site, it is a cookieless page-view counter that records only the page path, referrer, rough country and a coarse browser label. It never sets a cookie, never assigns you an identifier, and cannot follow you to another site.

The script is not loaded until you allow it. On a first visit you get a banner with two equally weighted choices; nothing is requested from the analytics host before you answer, and declining is permanent for that browser.

5. Local storage

The only thing this site writes to your browser is a single localStorage key, bg420:analytics-consent, holding your answer to the banner above so it is not asked twice. It is not a cookie, it is never transmitted anywhere, and clearing your site data removes it.

6. The browser tools

Three pages on this site are interactive instruments, and they behave differently from the reading pages. All of them run entirely in your tab — nothing you load into them is uploaded to me, because there is nowhere for it to be uploaded to.

• WHISPER_KEY — images, messages and passwords are processed in-page with the Web Crypto API and the canvas. No image or key material ever leaves the browser.
• GHOST_CHAIN — hashing, decoding and parsing are local. Two features make outbound requests on your instruction: the header viewer fetches the URL you type, and "My IP" queries api.ipify.org. Those third parties see the request as if you had made it yourself.
• NET_INTERCEPT — fetches the URL you enter and reads your own browser's Performance timings. The target server sees a normal request from your browser.

7. Contacting me

The contact route on this site is a GitHub issue. GitHub issues on a public repository are public — the text, and the GitHub account that opened it, are visible to anyone and indexed by search engines. Do not put anything confidential in one. Contact details are on the contact section of the home page.

8. Your rights

Because I hold no personal data about visitors, there is nothing of yours for me to export, correct or erase. If you have opened a GitHub issue and want it removed, ask in the issue or through GitHub and I will delete it. For the request logs and the font requests described above, the controllers are GitHub and Google respectively, and their own policies apply.

9. Changes

If what the site does changes, this page changes with it, and the date above moves. The full revision history is in the commit log for this file, so you can see exactly what changed and when.