This page is generated from this server's live configuration every time it is loaded — the retention periods, the cookie lifetimes and the list of third parties below are read from the settings actually in force, not from a template. It describes what the software does. It contains no legal interpretation, because the software is not in a position to offer any.
DBBASIC, established in United States, is responsible for the information described here. Write to dan@q9.is about anything on this page.
Every request this server answers appends one row to its own log, on its own disk. No third party is involved and no script is served to your browser to do it. No cookie is involved. Visits are counted by network address, which means a returning visitor is indistinguishable from a new one — that is the trade this server makes rather than storing an identifier on your device.
| Field | What it is |
|---|---|
| IP address | the address the request came from |
| Host | which of this server's sites was asked |
| Path and method | the URL requested and how |
| Status | what the server answered |
| User agent | the browser or client string your software sent |
| Referrer | the page that linked you here, if your browser sent one |
| Timestamp | when |
Those rows are kept for 14 days and then deleted, and the log is additionally capped at 20,000 rows so the oldest are dropped if it fills sooner. Both figures are read from this server's own configuration by the page you are reading, so they are the numbers actually in force.
Do Not Track and Global Privacy Control are honoured. If your browser sends either signal, no cookie is set for you at all. You are still counted by address, because asking not to be remembered is not the same as asking not to be counted.
| Cookie | What it is for | How long | Strictly necessary? |
|---|---|---|---|
dbbasic_session | Keeps you signed in after you enter your password. You sign in. | 1 days Max-Age=86400 | Yes you asked to sign in, and there is no way to stay signed in without it |
cart | Remembers which basket is yours, so what you put in it is still there on the next page. It holds an opaque token, not the contents. You put something in the basket. | 14 days Max-Age=1209600 | Yes you asked for a basket; a shop cannot keep one without a way to recognise it |
Every cookie above is first-party (set by this server, sent only back to it), HttpOnly (no script on the page can read it) and SameSite=Lax. None of them is an advertising or cross-site identifier, and there is no third-party script on any page of this site to set one.
To see how many people visit, which pages they read, and to spot attacks and broken links.
Kept: 14 days.
To take, fulfil and account for what you bought. These are business records.
Kept: for as long as the law requires business records to be kept, which is longer than you might expect.
To take payment and to reconcile it against your invoice.
No payment provider is configured on this server; payments are recorded by hand.
Kept: with the invoice it pays.
To get the parcel to the address you gave.
No carrier account is connected to this server, so no address is sent to one from here.
Kept: with the order it belongs to.
Text you type into an AI feature on this server is sent to the provider below to answer it.
AI features are only reachable by a signed-in operator of this server, not by visitors.
Shared with: anthropic, openai.
Kept: the request is not stored by this server beyond its usage record (which service, how many tokens, when).
| Who | What for | What they receive |
|---|---|---|
| anthropic | AI features | the text an operator of this server types into an AI feature, and whatever server records that feature reads to answer it |
| openai | AI features | the text an operator of this server types into an AI feature, and whatever server records that feature reads to answer it |
This list is generated from the credentials actually configured on this server, not maintained by hand. A provider that is not set up cannot appear on it, and one that is set up cannot be left off.
Traffic records are keyed to an address and a token with no link to a person, so they cannot be searched for you in either direction; they age out on the retention above.
Write to dan@q9.is.
A machine-readable version of everything above is at /privacy.json, and the cookie table on its own is at /cookies. They are the same fold over the same settings, so they cannot disagree with this page.