What this site
collects, and why.

Who is responsible

Manolis Charalampous is the data controller for m4no5.com. For any privacy question, or to exercise any of the rights described below, contact manoliszografos@gmail.com.

If you just read the site

Nothing about you is stored. The pages are static files. No cookie is set, no analytics tag runs, and no third-party script loads until you actively choose otherwise. Your browser makes an ordinary request to the CDN that serves the site, which processes your IP address transiently in order to deliver the page. That is unavoidable for any website and is not retained by me.

Analytics, only if you accept

This site uses Google Analytics 4 to count visits and see which essays are read. It is off by default. Until you press Accept on the consent banner, no analytics script is downloaded at all and no identifier is created. Nothing is loaded speculatively and then held back; it simply does not run.

If you accept, Google Analytics sets a first-party cookie to distinguish repeat visits, and records the pages you view, approximate location derived from IP, device type and browser. It is configured so IP addresses are not stored in full. I use it to understand which writing is worth continuing, nothing more. It is never used to build a profile of you, and the data is never sold or shared for advertising.

You can change your mind at any time by clearing this site's data in your browser, which resets the banner. Declining is remembered, so you will not be asked repeatedly.

Google acts as a processor for this data. See Google's privacy policy.

The contact form

If you send a message, the form collects your name, email address, optionally your organisation and enquiry type, and your message. These are sent to my inbox by email and are not stored in any database, because there isn't one. I keep the email for as long as the conversation is useful and delete it when it is not.

Two invisible anti-spam checks run on submission: a hidden field that only automated scripts fill in, and a timing check that rejects submissions completed impossibly fast. Neither collects anything about you.

Cloudflare Turnstile

The contact form is protected by Cloudflare Turnstile, a privacy-preserving alternative to traditional CAPTCHAs. It runs invisibly, so you will not see a puzzle or a checkbox.

Turnstile loads only once you interact with the contact form. If you never touch it, no request is made to Cloudflare at all. When it does run, Cloudflare receives technical signals from your browser to distinguish humans from automated abuse. Cloudflare states that Turnstile does not use this data for behavioural advertising or cross-site tracking.

Use of Turnstile is governed by the Cloudflare Turnstile Privacy Addendum and Cloudflare's privacy policy.

Who else is involved

Keeping this list honest matters more than keeping it short, so it includes anything that can see your IP address:

• Vercel hosts the site and runs the contact form function. It processes request data, including IP, to serve pages and mitigate abuse. See Vercel's privacy policy.
• Cloudflare provides DNS for the domain and the Turnstile check described above.
• Google provides Analytics, only after consent, and the Gmail infrastructure that carries contact form messages to my inbox.
• cdnjs and unpkg serve two animation libraries used on the homepage. Loading a file from them exposes your IP address to those services, as any external file request does.

Fonts are self-hosted on this domain rather than loaded from Google Fonts, specifically so that reading the site does not disclose your visit to a font provider.

Your rights

Under the GDPR you can ask me for a copy of any personal data I hold about you, ask me to correct or erase it, object to processing, or ask for it in a portable format. In practice the only personal data I am likely to hold is an email conversation you started. Email me and I will action it.

The lawful basis for the contact form is your consent in choosing to write to me, and my legitimate interest in preventing spam. The lawful basis for analytics is your explicit consent, which is why it is off until you give it. You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus.

Changes

If what the site does changes, this page changes with it. The date at the top is the honest one.