The short version. We don't sell anything, we don't run ads, and there is nothing to sign up for. You can read everything we publish without telling us who you are.
We would like to know how many people visit and which pages they find useful. That needs a cookie, so we ask first — and if you say no, nothing is set and nothing is collected. We also count visits in a way that uses no cookies at all, which is why we can say "about 400 people read that" without knowing anything about any of them.
1. Who we are
Dot11 Media is the data controller for the websites listed below. Dot11 Media is personal work made in personal time — it is not a company, it sells nothing, and nothing it publishes carries a price.
If you want to talk to us about anything on this page, the contact route is on the home page. The address is deliberately not printed in this page's source, to keep it away from address harvesters — reveal it there and email us.
2. What this notice covers
This notice applies to every page on:
- dot11.media — including this site,
/d11home - d11m.org — and every minisite published under it, currently
/mp-stats/,/LLBC/,/itEngineerSite/,/GCloudMCP/,/centaur/and/agbc/, plus any added later
One page named for completeness. d11m.org/bars/ is an unlisted sandbox — it is not linked from anywhere and is not meant for visitors. Because of the way that page is built, neither our analytics nor our consent banner can reach it: nothing is measured there, no cookie is set, and there is nothing for you to agree or object to. We name it so the list above cannot be read as leaving something out.
What it does not cover. The Le Lapin Blanc Club daily reading is published on Blogger, which is run by Google on its own terms and infrastructure. It is not covered by this notice. Nor is any site we link out to — once you follow a link away from us, you are on someone else's terms, not ours.
3. What we collect, and why
Four things touch your browser. Only the first one needs your permission.
| What | Why | Cookies? | Your permission? |
|---|---|---|---|
| Google Analytics 4 | How many people visit, which pages, roughly where from | Yes | Asked for, and required |
| Cloudflare Web Analytics | A cookie-free visit count | No | Not required — nothing is stored on your device |
| Cloudflare Turnstile | Checks you're human before showing our email address | No | Runs only when you click "Reveal our email" |
| Web server logs | Keeping the site up and spotting abuse | No | Not required — a security necessity |
Google Analytics 4 — the one we ask about
The first time you visit, a banner asks whether you're happy for us to collect analytics. No Google Analytics cookie is written and nothing is sent to Google until you agree. If you decline, or simply ignore the banner, that stays true — you can check it yourself in your browser's developer tools, and the full list below says exactly what is set and when.
One thing that happens whichever way you answer. The moment you make a choice — yes or no — a single request goes to Cloudflare recording that a choice was made, so your answer can be remembered and applied on every page after it. It carries no analytics data, and if you declined, Google still receives nothing. We mention it because it shows up as an event in our own monitoring, and a refusal that produces a visible event deserves explaining rather than glossing over.
If you do agree, two first-party cookies are written — cfz_google-analytics_v4 and cfzs_google-analytics_v4. They let us tell a returning browser from a new one. Through them we see pages viewed, device and browser type, how you arrived, and on the MP leaderboard which cards and filters get used.
We use Google Analytics 4, provided by Google, who act as our processor. Measurement runs through Cloudflare Zaraz, which sends the data to Google from Cloudflare's servers rather than from your browser. One consequence you can verify yourself: Google's usual _ga cookie is never set on our sites — Zaraz keeps that state in its own first-party cookies instead.
We have switched off sending your IP address to Google. That means we lose the location reporting Google Analytics would normally provide — we would rather not know than collect something we have no use for. We have no way to work out who you are from any of this.
Legal basis: your consent (UK GDPR Article 6(1)(a); Privacy and Electronic Communications Regulations reg. 6).
Kept for: 14 months, after which Google deletes the underlying records.
Cloudflare Web Analytics — the cookie-free count
This counts visits without storing anything on your device at all — no cookies, no local storage, no fingerprinting. It cannot recognise you between visits, and it deliberately does not record the query string on a URL. Because nothing is written to your device, it does not require consent, and it runs whether you accept the banner or not.
This is how we get an honest traffic figure. Analytics that need consent only ever see the people who said yes, so they undercount — a cookie-free count doesn't have that problem.
Legal basis: our legitimate interest in knowing whether the work is being read (Article 6(1)(f)).
Cloudflare Turnstile — only when you ask for our email
Our contact address is not written into any page's source, so it can't be scraped. When you click to reveal it, Cloudflare Turnstile runs a quick check that you're a person and not a bot. It sets no cookies and does no cross-site tracking. If you never click, it never runs.
Legal basis: our legitimate interest in not having the address harvested (Article 6(1)(f)).
Server logs and fonts
Our hosting provider keeps standard web server logs — IP address, time, page requested, browser — for security and troubleshooting. These are ordinary hosting records, not analytics, and we don't mine them.
Our pages load typefaces from Google Fonts. Requesting a font tells Google your IP address, as any request to any server does. No cookies are involved.
The full cookie list
Every cookie our sites set, what it does, and whether it waits for your permission. Verified in a browser on 16 August 2026 — you can check it yourself under developer tools → Storage → Cookies.
| Cookie | What it does | Set when | Lasts |
|---|---|---|---|
cf_clearance |
Cloudflare's security check — proves your browser passed, so you aren't challenged repeatedly | Always — strictly necessary for security | About a year |
cfz_zaraz-analytics |
Cloudflare Zaraz's own reference for your browser and current visit | Always, including if you decline | About a year |
zaraz-consent |
Remembers your answer, so we don't ask on every page | When you answer the banner, either way | About a year |
cfz_google-analytics_v4 |
Google Analytics — tells a returning browser from a new one | Only if you accept | About a year |
cfzs_google-analytics_v4 |
Google Analytics — counts pages within a single visit | Only if you accept | Until you close the browser |
The honest bit about the second row. cfz_zaraz-analytics is set by Cloudflare Zaraz whether or not you consent, and it holds an identifier for your browser and visit. We did not choose that behaviour and we do not read that cookie for analytics. We are raising it with Cloudflare and we would rather tell you it exists than leave it off a list that claims to be complete. It is not used to identify you, and declining still stops everything reaching Google.
4. What we deliberately don't do
Worth stating plainly, because the absence of a thing is hard to see:
- No accounts. There is nothing to register for, so there are no names, passwords or profiles.
- No selling, renting or sharing of anything we collect, to anyone, ever.
- No advertising, no ad pixels, no retargeting. There are no ads on any of our sites.
- No profiling and no automated decisions about you.
- No payments — nothing here is for sale, so no card or billing data exists.
- No mailing list and no marketing email.
- No special category data. We have no reason to collect anything about health, beliefs, politics or anything similar, and we don't.
- Nothing knowingly collected from children. These sites are written for adults and there is nothing here aimed at children.
5. Where the data goes
Google and Cloudflare are both US-headquartered and process data outside the UK. Both operate under the UK Extension to the EU–US Data Privacy Framework and standard contractual clauses. We use them because they are the sensible tools for a site this size; we have no separate arrangement with either beyond their standard terms.
Our hosting is with Heart Internet, in the UK.
6. Your choices
- Say no. Decline the analytics banner. Nothing is set, and the site works exactly the same — we don't gate anything behind consent.
- Change your mind. Reopen the consent banner from any page and withdraw permission. Withdrawing is as easy as giving it, and it takes effect immediately.
- Clear what's already there. Delete cookies for our domains in your browser settings and any existing analytics cookies go with them.
- Block it entirely. Google publishes a browser opt-out add-on, and most browsers can block cookies outright. We won't try to work around either.
7. Your rights
Under UK data protection law you can ask us for a copy of any personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to have it sent to someone else. Where we rely on your consent, you can withdraw it at any time.
An honest note about what we can actually do. We hold no accounts and no names. Analytics data is not linked to any identity, which means that if you ask us to find "your" data, in most cases we genuinely cannot pick it out — there is nothing tying any record to you. The practical remedy is the one in section 6: withdraw consent and clear the cookies, and the trail stops. We would rather say that plainly than promise a lookup we cannot perform.
Ask us anything about this through the contact route on the home page. If you think we've got it wrong, you can complain to the Information Commissioner's Office, the UK's data protection regulator. We'd appreciate the chance to fix it first.
8. Changes to this notice
If what we collect changes, this page changes with it, and the date at the top moves. Every website we publish is added to a standing record of what is measured and how, so a new site cannot quietly appear without its measurement and consent position being written down.
If Dot11 Media ever becomes commercial — a price, a service, a paid offer of any kind — this notice will need rewriting and proper legal review before that happens, not after.