WHAT THIS SITE MEASURES

For each page you open, one row is written containing:

• the page path, without any query string
• the hostname you came from, if you followed a link — never the full address of the page you were on
• your country, as two letters, from Cloudflare. Never a city or region
• desktop, mobile or tablet; the browser name; the operating system name
• the time, to the hour
• a visitor code, explained next

Your IP address is never written anywhere. Neither is your full browser string.

Counting people requires telling them apart. Instead of storing something about you, this site computes a one-way code:

code = SHA-256( today's random salt + your IP + your browser string )

The salt is 32 random bytes, generated fresh each night and deleted two days later. While it exists, you count as the same visitor all day. Once it is gone, the code cannot be reversed, cannot be recomputed from an address, and cannot be matched against your code from any other day.

After 48 hours this database is physically incapable of telling that two visits were the same person. That is a property of the design, not a promise about behaviour.

Two things need something stored on your device, so they are off unless you allow them: whether you have visited on an earlier day, and how long a page held your attention.

If you allow it, two cookies are set, for six months:

• df_consent — the word accepted or rejected, so you are not asked twice
• df_first — the date you first allowed it, so the site can tell a first visit from a return

That is all they contain. There is no identifier in either, so there is no profile to build and nothing to hand over if you ask what is stored about you: it is a word and a date, on your device, and you can read them yourself.

Allowing it also lets the page report its screen size, browser language and timezone, and how many seconds it was actually in front of you.

Nobody else. There is no Google Analytics, no advertising network, no embedded widget, no third-party script of any kind. The data is written to a database in Cloudflare’s European region and read only by the person running this site.

Visit rows are deleted after 14 months. Salts are deleted after two days. Nothing here is sold, shared, or used to target anything at you — there is nothing to target with.

The legal basis for the counting is legitimate interest (Art. 6(1)(f) GDPR): a site owner may know how many people visit, and this is the least identifying way to find out. The optional cookies rest on your consent (Art. 6(1)(a) GDPR and §25 TDDDG), which you can withdraw above at any time, with one press.

Prices, order books and craft profitability come from public in-game order screens on DonutSMP and are not connected to visitors in any way. How that works.