mash. / privacy
What this site collects, and what it doesn’t.
I’m Michael Shreeves, and I’m the controller for this site — as an individual, not a company. This covers this personal site only. A tool with its own accounts and real users — see what I’m building — has, or will have, its own privacy notice; check that tool directly rather than assuming this page covers it. Email [email protected] about anything here — a question, a correction, or a request about your own data. I aim to reply within five working days. Last updated 12 September 2026.
What’s collected
Almost nothing, and I’d rather say so plainly than pad this out.
There’s no account to create, no form on this site that collects anything, and no newsletter. The only way to reach me is the email link in the “Get in touch” section — if you use it, whatever you choose to write is between you and your own mail provider and mine, and I keep that message only as long as I need to answer it and any thread that follows.
The one thing this site does collect is anonymous visit data, covered next.
Analytics
Self-hosted, cookieless, and IP-anonymised.
I run Matomo, a self-hosted analytics tool, at
analytics.mashreeves.com — on the same server this site itself runs on, so
nothing about your visit is sent to a third-party analytics company. It’s configured to
set no cookie at all and to anonymise your IP address before storing anything, so there is
nothing here that identifies you individually, and nothing that needs your consent under
PECR — the rule that requires consent applies to cookies and similar tracking
technologies, and none is used.
What is recorded: which pages were viewed, roughly when, and a coarse sense of where visits come from (country-level, from the anonymised IP) and what device/browser was used. Retention for this data is not yet time-limited — stated honestly rather than invented: there is currently no automatic deletion schedule configured, which is a gap I intend to close rather than a considered policy.
Cookies
This site sets none.
There is no session, no account, and the analytics above is
configured cookieless — so there is genuinely nothing to list in a cookie table. The
light/dark theme toggle is remembered in your browser’s localStorage, not a
cookie: it never leaves your device and nothing reads it but this site, on this device.
Who else is involved
The host, and the network in front of it.
This site is hosted on a Vultr VPS in Vultr’s Manchester, UK data centre — see the trust & security page for what that means and doesn’t mean. Cloudflare sits in front of it for security and performance, which means Cloudflare sees your connection to this site (your IP address and request details) as part of routing it — the same way any CDN in front of any website does. I do not sell your data, and I do not share it for advertising.
Your rights
The usual UK GDPR rights, and the ICO.
You can ask what I hold about you, ask for it to be corrected or deleted, or object to how it’s used — email [email protected] and I’ll respond within one month. If you’re unhappy with how I’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. As a sole individual operating at this scale I’m not required to appoint a Data Protection Officer, so there isn’t one to name.
Accessibility is covered on its own accessibility statement, and infrastructure/security on the trust & security page — neither repeated here. Back to everything I’m building, or the full site.