Legal
Cookies and storage
We use no tracking cookies. Two technical ones can appear, and here is what each is for.
We use no cookies for analytics, advertising or tracking. Nobody is counting you, following you between pages or building a profile of you, and no other company is doing it through us either. That is why you have not been asked to agree to anything.
Two cookies can appear while you use this site. Both are technical, both are set by a company that does a specific job for us, and neither is used to recognise you afterwards.
| Cookie | Set by | What it is for | When | How long |
|---|---|---|---|---|
__cf_bm | Cloudflare, which delivers our images | Tells automated traffic apart from people, so that the service is not overwhelmed by bots | On any page that has a picture on it | 30 minutes |
AWSALBCORS | FundraisingBox, which runs our donation form | Keeps you connected to the same server while you fill the form in, so that the form works | Only once you press the button that loads the donation form | 7 days |
Both are what the law calls strictly necessary: one protects a service from abuse, the other makes a form work that you have asked us to load. Neither needs your consent under § 25(2) no. 2 TDDDG, which is why there is no banner. To confirmcounsel to confirm this reading.
The donation form is a second step anyway. Our donation page does not load it until you press a button, so nothing reaches FundraisingBox, and no cookie is set, unless you decide to give.
Where there was a cookie that did nothing useful, we switched it off: our language detection used to store one on every first visit to remember the only language this site has, and it no longer does.
What this site stores on your device
One thing, and only if you listen to the podcast.
| What | Where | When | How long |
|---|---|---|---|
| Your position in a podcast episode | Your browser's local storage, under the name ja:podcast:position | Only after you have listened to an episode for more than thirty seconds | Until you clear your browser's data for this site |
It holds an episode number and a number of seconds, and nothing else. It never leaves your device: there is no address on our server that receives it. It exists so that a two-hour episode survives you reloading the page. To remove it, clear site data for this website in your browser settings.
Under § 25(2) no. 2 TDDDG this is storage that is strictly necessary to provide a service you have expressly requested, namely playing an episode, so it does not require your consent. To confirmcounsel to confirm this reading.
Who else your browser talks to, and when
A cookie is only half the question. The other half is which companies learn that you were here at all, because your browser has to contact them to fetch something. On this site that is three, and the page you are on decides which.
Our images
Pictures are delivered by Cloudflare on our behalf, so any page with a picture on it contacts them and sets the __cf_bm cookie above. The home page loads no pictures from them at all, and neither does this one.
The podcast player
Nothing reaches our podcast host until you press play. Browsing the episode list sends them nothing: we fetch that list on our own server rather than in your browser. When you press play, the audio is streamed from Acast and they receive your IP address and what you are listening to. Pressing play is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. If you never press play, nothing is requested and nothing is stored.
The donation form
Our donation page shows the case for giving and a button. Nothing reaches FundraisingBox until you press it. From that point the form is theirs, the AWSALBCORS cookie above is set, and PayPal is contacted too, because it is one of the payment methods the form offers.
That cookie does not track you across websites and is not used for advertising. It is there because a donation form that loses your session halfway through is a donation that does not happen.
What we do not use
No Google Analytics, Matomo, Plausible or any other analytics. No tag manager. No advertising or conversion pixels from any network. No Google Fonts: our typeface is served from our own server, so no request goes to Google when you open a page. No social media widgets, like buttons or share tools: our social links are ordinary links. And no consent management platform, because there is nothing for one to manage.
What we do collect is described in our privacy policy.