Privacy
What this site collects
Last updated 3 September 2026.
The short version
This is a handful of static pages about five open-source projects. The site asks once whether you want analytics, and does nothing until you answer. Decline, or ignore the banner entirely, and Google is never contacted from here and no analytics cookie is written. Nothing is gated on your answer — saying no changes nothing about what you can read.
This site previously loaded Google Analytics on every visit with no banner and no notice, on the reasoning that a single page which only listed links to other sites had little to disclose and nothing worth asking about. That reasoning expired when the site grew pages of its own. The gate and this page arrived together, which is the same argument reaching a different answer rather than a change of position.
What is stored in your browser
Two things, neither needing consent, because both exist only to honour a choice you just made:
coffeylabs-themeinlocalStorage— your light or dark choice, so the site does not flash the wrong colours at you next time.coffeylabs-consentinlocalStorage— your answer to the analytics banner, so it stops asking. Written whichever way you answer.
Neither leaves your browser and neither contains an identifier. Clearing site data removes both, and the site works fine without them — it shows its default dark palette and asks about analytics again.
Analytics, only with your consent
If you accept, the site loads Google Analytics 4 (property
G-KL24FNNEK7) and sets its first-party cookies —
_ga and _ga_<id> — to count visits and see
which pages people actually read. Google receives your IP address, the
pages you view, and basic device and browser information, and acts as our
processor for it.
The lawful basis is your consent, under GDPR Article 6(1)(a) and the ePrivacy Directive Article 5(3). That is why nothing loads before you answer: consent has to come first, and it has to be an affirmative act. Google's script is not on the page at all until you say yes — not loaded and then held back, which would still contact Google on first paint.
Withdrawing is as easy as agreeing was, which Article 7(3) requires: Cookie settings in the footer reopens the banner at any time. Choosing Decline there deletes the analytics cookies as well as stopping any further collection.
What the server records
The web server keeps ordinary access logs: IP address, timestamp, the path requested, the referring page and your browser's user-agent string. This is the standard record any web server keeps in order to be operated and defended, retained on the basis of legitimate interest (GDPR Article 6(1)(f)) and kept no longer than needed to serve that purpose. The site is served through Cloudflare, which terminates TLS and therefore also sees this request metadata.
What is not collected
No account, no email address, and no form on the site to type one into — the contact page lists addresses to write to, which puts you in control of what you send and when. No advertising, no profiling, no cross-site tracking, no data sold or shared with anyone for their own purposes. The analytics above is Google measuring this site for us as our processor; it is not advertising, and the advertising signals Google supports are switched off explicitly rather than merely left unused.
AI
Nothing you do here is sent to an AI service. This site runs no AI feature of any kind: no assistant, no chat, no summarising, no scoring or profiling of visitors. Analytics, if you accept it, is Google Analytics as described above and nothing more.
Where AI was used is in writing the projects and these pages: parts of them were drafted with the help of AI tools, principally Claude, and every such contribution is reviewed, tested and maintained by the maintainer. That is a fact about how the software was built, not about your data. One project, Cairn OBS, does ship an AI feature of its own. The fuller account, project by project, is the AI disclosure.
Links away from here
Every project link on this site leaves it. The repositories on GitHub, the project sites at ihasmail.org, docs.ihasmail.org, cairnobs.org and jcoffey.dev, and the ihasmail demo are separate services with their own logs and their own notices. Following one of those links takes you somewhere this page does not describe. This notice covers coffeylabs.org only — and coffeylabs.com and coffeylabs.net, which redirect here.
Your rights, and who to ask
If you are in the UK or EU you have rights of access, rectification, erasure, restriction, objection and portability over personal data held about you, and the right to complain to your supervisory authority. Given what this site actually holds — access logs, and analytics you agreed to — a request will usually be answered by finding and deleting log lines.
The controller is Coffey Labs. Write to privacy@linuxexperts.net.