Effective October 17, 2026

This notice covers the vincentmossman.com homepage and its visitor and Owner Access features.

Visits and security

The site records IP addresses, browser user-agent information, request times, paths, hosts, request methods, response statuses, disconnects, and referring pages when supplied. This includes page, API, and asset requests reaching the homepage application. Request bodies, cookies, authorization headers, and query strings are not recorded. It uses a local database for approximate IP-country statistics. Older records may retain previously collected location and network information or full referring URLs. Unlock-attempt times are recorded by IP for rate limiting. Opening Owner Access adds an opening count and latest-open time to the existing visitor record.

What visitors can see

Public analytics shows estimated unique visitors and their approximate country breakdown. The estimate uses distinct IP/browser combinations with page visits and excludes recognizable automated and non-browser clients; it is not a verified count of people. Individual IP addresses, browser details, visit history, and Owner Access activity require human verification and the owner’s quadrant pattern. Detailed analytics is available only on the protected Homepage Analytics page through My Stuff.

Services used

Country lookup happens on this server using a local DB-IP database; visitor IP addresses are not sent to a location service. If the database is unavailable, new locations remain unavailable until it is restored. IP Geolocation by DB-IP. The homepage loads fonts from Google Fonts and a security script from Cloudflare Turnstile. Turnstile processes browser and security signals to distinguish people from automated traffic; the server also sends the challenge response and IP address to Cloudflare for verification. See Cloudflare’s Turnstile Privacy Addendum for its processing details.

Cookies and browser storage

Short-lived cookies support human verification and access to private visitor details. Browser local storage remembers the selected background and photography playback state. You can clear this storage through your browser; doing so resets saved preferences and may require verification again.

Retention and privacy signals

Visitor records and their individual request histories are stored on this server indefinitely, with no automatic age or record-count deletion. Automated traffic is also stored, even when excluded from the public visitor estimate. Counts were reset using the detailed records still available; previously discarded history cannot be recovered. The site’s application does not currently change its logging behavior in response to Do Not Track or Global Privacy Control signals.

Changes to this notice

Updates will be posted here with a revised effective date.

Links and contact

Linked sites and tools may have their own data practices and privacy policies. For questions about this site’s records or a privacy request, email [email protected].