Private access
Privacy details
This private site records limited access and traffic information for security, access management and basic statistics. It does not use advertising trackers or device fingerprinting.
What is recorded
- A gate-page visit or successful access, its time and the two-letter country supplied by Cloudflare, or “unknown”.
- An approximate daily visitor signal derived from a keyed one-way transformation of the network address and UTC date. The site does not persist the raw network address, but this short-lived signal is pseudonymous rather than anonymous.
- A short-lived keyed rate-limit counter derived from the network address and time window, used to slow repeated access attempts.
- After successful access, the submitted email address as an unverified label, the access-code label, access time and subsequent opening of the protected front page.
- Administrative creation, rotation and revocation of access codes, without storing the administrator’s email address or authentication token.
What is not recorded
Submitted access keys, failed-login email addresses, raw IP addresses, browser or device fingerprints and page-query contents are not stored in the site’s activity database. Cloudflare necessarily processes network and request information to deliver and protect the site.
Retention and interpretation
The pseudonymous daily-visitor signal is deleted after 48 hours and rate-limit counters after 24 hours. Detailed visits, successful-access sessions and page-open events are deleted after 30 days. Daily totals, country totals and administration audit history may be retained for up to 396 days. Backup recovery windows may briefly retain restorable copies.
“Approximate daily visitors” is not a count of people: shared networks, VPNs, network changes, automated traffic and browser behaviour can make it lower or higher than the number of individuals.