Two tools, each doing one job:
Cloudflare Web Analytics
Cookieless page counts — how many people visit, and which pages. It sets nothing on your device and doesn't follow you anywhere else.
PostHog
Product analytics: which pages get read, how far down, what gets clicked, and — the reason I added it — whether anyone actually uses the assistant. It records those interactions as a session so I can see where people get stuck. It sets a cookie to tell one visit from the next. Data is processed by PostHog on US servers.
Questions to the assistant are the exception, and the one thing here I keep in full. What people want to know about my work is the most useful thing this site can tell me, and an answer only turns out to be wrong if I can still read the question that earned it. I keep the question, not the asker: there's no name, account, or email attached to it, because the site never asks you for one. A replay is a reconstruction of the page as you saw it, so a conversation with the assistant is legible there too.
- Nothing is sold, rented, or shared for advertising. There are no ad networks or marketing pixels on this site.
- No one is being profiled. Visits are anonymous — I don't know who you are, and I'm not trying to find out.
- Nothing you type is tied to you. I keep the questions people ask the assistant, deliberately and in the open — but not who asked them, and there's nothing on this site that could tell me.
- Nothing follows you off this site. None of this tracks you across the wider web.
If you'd rather not be counted, you have a few ways out, and I've tried to make the easy one actually work:
- Do Not Track. If your browser sends a Do Not Track signal, PostHog honors it and records nothing — no pages, no clicks, no questions, no replay. Cloudflare's counts are cookieless and anonymous regardless. Most browsers have this in privacy settings.
- A content blocker. Any standard privacy extension (uBlock Origin, Privacy Badger, and most others) blocks both tools outright. The site works exactly the same with them blocked.
- Just ask. Email me and I'll answer any question about what's collected, or delete what I can tie to you.
There's no consent pop-up because I'd rather not put one in your way on a personal site that sells nothing and advertises nothing. That's a judgment call, not a loophole, and the choices above are real rather than decorative — which is the part a pop-up usually gets backwards.
The "Ask" feature handles data on its own terms: your question goes to Anthropic's API to generate an answer, the server that proxies it writes down nothing but a counter, visitor IPs are hashed rather than kept in the clear, and the conversation itself stays in your browser — there's a “clear chat” control in the panel that deletes it from this device whenever you want. The question reaches me through the analytics above, and that's the only copy I hold. How the whole thing is kept from making things up is written up in full on the colophon.
How the assistant works →This is a personal portfolio, not a business, and I'm the only one who sees any of this. If something here isn't clear, or you want your data out, email eric@waitwut.com and I'll sort it out.
LAST REVIEWED · AUGUST 2026