Privacy

What a visit leaves on your device

Nothing. Monsoon Vintage is made of static pages, written out ahead of time and served as they are. The text and the stylesheet come from this domain alone. No script runs, no cookie is set, nothing is written to local storage, and no font, image, video, map or share button is fetched from anyone else, so opening a page here makes no request to a third party. There are no accounts to sign into and no comments to post.

What nginx keeps

The web server is nginx, and like most servers it keeps an access log. Each request adds a line: the visitor’s IP, a timestamp, the path requested, the status code, the byte count of the reply, where the visitor was just before, when the browser says, and the name the browser gives for itself. Failed requests can also land in an error log, again with an IP address. Log files roll over daily, and each one is erased when it reaches 14 days of age. They are opened only to fix a fault or to block abusive traffic. Nothing in them is sold, passed on or matched against other information.

Mail sent to the editor

Writing in hands over an email address plus the contents of the message. Both are used for one thing, replying. Neither is added to a list, handed to anyone or kept for marketing, and both will be deleted on request.

Pages elsewhere

A few pieces cite a source on another website. Once you follow one, you are on someone else’s server, and their privacy rules govern that visit.

Questions

Anyone who wants to see what has been kept about them, or wants it erased, can ask by email; the contact page has the address. In practice that comes to a couple of weeks of log lines and any email you have sent.