etminan
Privacy

We don't want your data.

This is a static site — no accounts, no forms, no cookies, nothing tracking you across visits. The one honest exception is a short-lived security log described below, kept for as little time as it's useful and for no reason beyond blocking abusive traffic.

01 — What this site does not do

No cookies, no analytics, no trackers.

No cookies
This site sets none, of any kind — no session cookies, no preference cookies, no third-party ad or analytics cookies. There's no cookie banner because there's nothing to consent to.
No analytics or tracking scripts
No Google Analytics, no Plausible/Fathom/Umami, no pixel, no fingerprinting script of any kind. Every page here is plain HTML and CSS with no third-party JavaScript at all.
No third-party embeds
No external fonts, no CDN-hosted scripts or stylesheets, no embedded videos or widgets. Every asset this site loads is served from etminan.dev itself — nothing your browser fetches here ever reaches a third party as a side effect of visiting.
No accounts, no forms
There's nowhere to sign up and nothing to submit — the Contact section is a mailto: link that opens your own mail client, not a form that sends anything to a server here.
02 — What the server necessarily logs, and why

One log, one purpose, deleted on a schedule.

Any web server that accepts connections generates some record of that by necessity — the honest thing to do is say exactly what it is, why it exists, and how long it lasts, rather than imply there's nothing at all.

What's logged
Caddy, the web server, writes a per-request access log: the requesting IP address, user-agent string, the URL requested, response status, and a timestamp. This is the same information essentially every web server on the internet logs by default.
Why it exists
Solely to feed CrowdSec, an intrusion- detection tool that watches this log for abusive patterns (credential-stuffing attempts, known attack signatures) and blocks the source at the firewall. It is not analytics, it is not used to measure traffic or build any profile of visitors, and nothing in it is ever sold, shared, or handed to a third party.
How long it's kept
14 days, then permanently deleted — a logrotate policy enforces this automatically on the server, not a manual step someone might forget. 14 days is enough for CrowdSec's own abuse-pattern detection (which correlates over hours to a few days, not months) while keeping actual retention short.
Who can access it
Only whoever has direct administrative (root/sudo) access to the server itself — there is no dashboard, export, or third-party service with a copy of this log.
03 — If you email us

That's a normal email, not something this site stores.

Clicking the Contact link opens your own mail client addressed to us — whatever you send is an ordinary email exchange with the Etminan team, handled the same way any correspondence is, and is never published or shared beyond that. This website itself has no record of it; the site is static files served by Caddy, with nothing server-side to receive or log the contents of an email you send us.

04 — Downloading packages

No telemetry, no phone-home.

Downloading etminan's packages or verifying their GPG signature involves no request back to us beyond the plain HTTP(S) fetch of the file itself (subject to the same access-log handling described above) — the software doesn't contact any Etminan-operated server at runtime, and installing or running it collects nothing to send back to us.

05 — Changes to this page

This is an early-stage project — this page will evolve with it.

If that ever changes — a form gets added, a channel starts requiring an account, an analytics tool gets adopted — this page gets updated to say so honestly before it happens, not after. Last reviewed: 2026-07-22.