Privacy
This site does not track you. No analytics, no tracking pixels, no ads, no third-party scripts. Here is the whole story, on one page.
Cookies
I set only two cookies here and both are purely functional. NEXT_LOCALE remembers whether you read in Czech or English. notice_dismissed remembers that you closed the yellow notice at the top of the page, more on that right below. Neither is used to track or profile you, and that is exactly why there is no annoying cookie banner here.
Why the site remembers a closed notice
When there is a yellow notice up top, say about maintenance, you can close it with the cross and you will not see it anywhere again until you close your browser, not even in other articles. To make that work, you get a session cookie called notice_dismissed. I went with a cookie instead of JavaScript because I want it to work on Tor at the Safest level too, where no scripts run. There is nothing about you in it. All it holds is a short fingerprint of the notice text, and everyone who closed that notice has exactly the same one, so it cannot tell readers apart. The server just compares it with the current notice and shows the strip or not. When I post a new notice, the fingerprint changes and you will see it again, because it might matter. And since this is a security site: the close form only ever sends you back to a page on this site and nowhere else, so it cannot be turned into an open redirect. Once you close the browser, the cookie is gone. The exception is if you have session restore turned on, then the browser keeps it across restarts.
No account
You do not need an account to read anything here. There is no reader login, no comments, no newsletter. If you want to follow new posts, there is an RSS feed. No account, no tracking.
No third parties
I do not embed any third-party trackers, analytics, ads or scripts. The pages, images and styles are my own, and the site is self-hosted on a Raspberry Pi at my place.
Cloudflare Tunnel
I host this site at home on a Raspberry Pi and put it online through a Cloudflare Tunnel. The reason is down to earth: the tunnel is free and it is the simplest secure way to expose a site from a home network without opening ports on my router. On top of that it hides the home IP of my server, handles TLS and adds protection against attacks. I am against mass surveillance, so I turned off everything in Cloudflare that could be turned off, analytics included. One thing Cloudflare kept injecting on its own was its bot-detection script (JavaScript Detections), and no dashboard switch would turn it off. It took me a while to work out how to push back. The way around it is to send a Cache-Control: no-transform header with every page, which Cloudflare respects and then leaves the content alone. So today not a single line of JavaScript loads from Cloudflare. It was a proper pain. Your connection does pass through the Cloudflare network, and Cloudflare processes connection data such as your IP address under its own privacy policy. That is a security measure though, not a way to track you. And if you do not want Cloudflare at all, the Tor version right below skips it entirely.
Tor (.onion)
For anyone who is not comfortable with the connection going through Cloudflare, I run the exact same site as a Tor onion service. It goes straight to my server and skips Cloudflare entirely, Tor encrypts the traffic and your IP stays hidden, so there is no third party between you and the site. The link to the .onion version is up in the header, and the same link takes you from the onion back to clearnet. I also tuned the onion version for the strictest Tor Browser level (Safest), where JavaScript and SVG are turned off. The menu, the language switch and search all work without scripts, and wherever an icon would sit you get text instead, so you can run maximum security without a broken site.
No server logs
My server keeps no access logs and does not store your IP address. Every request reaches it from localhost (127.0.0.1), whether through the Cloudflare Tunnel or through Tor, so the source of the connection I see is always localhost. On clearnet, connection data is held only by Cloudflare at its edge, as noted above. Nothing about you is kept on my side.
Questions? em.notorp@22.norh.hcetjov
Last updated: October 2026