Ambiorix

Privacy

Last updated 2026-09-22

This dashboard counts visits so we can see whether anyone actually reads it. The analytics run on private hardware. Nothing is sold, shared with advertisers, or sent to an analytics company. There is no cookie banner because nothing is stored on your device.

Who runs this

The site belongs to Bart Kelchtermans. Its analytics are collected with Umami, an open-source analytics package, self-hosted by Andrei Lavrenov on private infrastructure at umami.lav.ren. To be precise about it: the two of us are the only people who see this data. No analytics vendor, advertising network or data broker is involved, and no third-party scripts run on these pages.

Nothing is stored on your device

The tracker sets no cookies and writes nothing to localStorage, sessionStorage or IndexedDB. The only value it reads is the opt-out flag below, and only if you set it. Requests go out with credentials: "omit", so no cookie travels with them. The EU cookie rule governs storing or reading data on your device — this site does neither, which is why you are not asked to accept anything.

What is collected

  • Pages opened: path, title and the referring URL.
  • Browser, operating system, device type, screen size and language.
  • Approximate location — country, region, city — derived from your IP address.
  • Loading performance: Core Web Vitals (LCP, FCP, CLS, INP, TTFB) and time on page.
  • Clicks on elements tagged for counting.
  • A recording of roughly one visit in seven — see below.

Session recordings

About 15% of visits are recorded. A recording is not video and not a capture of your screen: the page and its text are re-serialised and replayed, so we can see how the dashboard is read. Anything typed into a form field is masked inside your browser before transmission. The figures shown on this dashboard are public — the same numbers any visitor sees — so a recording discloses nothing about you that the page did not already show you. Heatmaps are aggregates built from these recordings.

How a visit is identified

Each visit carries a one-way hash of your IP address, browser user-agent, hostname and site ID. The hash cannot be reversed into an IP address and is not reused on other sites, so you are not followed across the web. Your IP address is processed to generate that hash and to resolve the approximate location above.

Stated plainly rather than marketed: an IP address is personal data under the GDPR, and a hash derived from one is pseudonymous, not anonymous. The lawful basis is legitimate interest under Article 6(1)(f) — understanding how this site is used. You may object at any time.

Retention

Analytics records are kept until deleted by hand. No automatic expiry is configured.

Your rights

You may request access to data concerning you, request erasure, or object to collection. Because a visit carries only an irreversible hash, we generally cannot single out your records from anyone else's — which is the point of the design, and why the opt-out below is the dependable remedy. For anything else, write to [email protected].

Opt out

This sets one flag in this browser, on this device, which the tracker checks before it sends anything. It is the only thing this site ever writes locally.