Privacy & cookies

Two cookies, only if you agree.

No advertising, no profiling, no data sold or shared. Analytics count visits and nothing else, and they do not run until you say so.

Your choice

You are asked once, when you first arrive. Whatever you choose is remembered, and declining is remembered just as durably as accepting — you will not be asked again each visit. You can change your mind here at any time, with immediate effect.

Cookies

Two, both set by Google Analytics and only after you accept: _ga and _ga_<id>, which together recognise a returning browser so two visits are not counted as two people. Both expire after two years, or sooner if you clear your browser. If you decline, neither is ever written, and there is nothing to delete.

No advertising cookies are set under any circumstances. Advertising storage, ad personalisation and Google Signals are switched off in the configuration, not merely left unused, so the data cannot be repurposed for advertising later.

Before you choose

Being straight about this: Google’s script loads when the page does, in a mode that stores nothing. Until you accept, it writes no cookie and sets no identifier, but it does send Google a request containing the page address, the referring page and general technical details of your browser, which Google uses to estimate overall visitor numbers. Your IP address reaches Google in the course of that request and is anonymised rather than stored. Accepting adds the two cookies above; declining leaves it in that storage-free mode permanently.

What is stored on your device

Besides the analytics cookies, two things, neither of which identifies you and neither of which is shared with anyone:

Your consent decision, in local storage, so the question is asked once rather than on every visit. Your position on the timeline, in session storage, so leaving a page and choosing “Back to timeline” returns you where you were rather than to the beginning — a scroll position and a chapter name, which your browser discards when you close the tab.

A diagnostic mode also exists for debugging, and stores a short trail of scroll positions locally. It is inactive unless the address explicitly ends in ?diag, so it never runs for an ordinary visit.

Third parties

Two, both Google: Analytics, described above, and reCAPTCHA on the contact form. Typefaces are served from this domain rather than from Google, images and video are hosted here, and there are no embeds, tag managers, advertising pixels or social widgets. Links out to other sites are ordinary links — they only take you somewhere when you click them.

reCAPTCHA

The contact form is protected by reCAPTCHA v3, which scores how likely a submission is to be automated. It never shows a puzzle. It does set a cookie (_GRECAPTCHA) and send Google information about your device and behaviour on the page in order to produce that score.

This is not covered by the analytics choice above, because it is not analytics: it exists to stop the form being abused, and is treated as strictly necessary to provide a service you asked for. It is deliberately not loaded when the page opens — only once you actually start filling the form in. Read the address and leave, and nothing from reCAPTCHA runs at all.

Google’s privacy policy and terms apply to that processing.

Google acts as my processor for analytics and may process the data outside the UK, including in the United States, under the transfer terms in its data processing agreement. The lawful basis is your consent, which you can withdraw above.

The contact form

If you write to me, the name, email address, subject and message you type are sent to my inbox through Mailchimp Transactional (Mandrill), which delivers the email and acts as a processor on my behalf. I use what you send only to read and reply to it. It is not added to a mailing list, sold, or used for marketing, and it stays in my email for as long as the conversation is useful.

The lawful basis is legitimate interest: you contacted me, and replying is the reason the form exists.

Server logs

Like any web server, mine records requests — IP address, time, page, browser — for security and to diagnose faults. These are not used to build a profile of you or combined with anything else, and they rotate on the host’s ordinary schedule.

Your rights

Under UK GDPR you may ask for a copy of any personal data I hold about you, ask me to correct or erase it, or object to my processing it. You can withdraw consent for analytics at any time using the control above, without giving a reason and without it affecting anything else. Write to me and I will deal with the rest. If you are unhappy with how I have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.

Contact

Zee Chaudhry, Tamworth, United Kingdom — email loading…

Last updated 10 September 2026. If anything else is ever added that stores or sends your data, this page changes with it.