Cookies & Local Storage
Last updated:
This site sets no cookies. The only thing you could reasonably object to is the page-view counter, so that is what the banner asks about — and it is off until you say yes.
1. Cookies
This site sets no cookies of its own, and no third party sets cookies through it. There is no advertising, no tag manager, no social tracking pixel, no Google Analytics, and no embedded video player.
2. What is stored in your browser
Three things may be written to your browser's local storage. None is a cookie, none is sent to a server automatically, and none is used to track you across sites.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
theme |
localStorage |
Remembers whether you chose the light or dark colour scheme. Written only when you use the theme toggle. | Until you clear your browser data. |
analytics-consent |
localStorage |
Remembers whether you accepted or declined the page-view counter, so you are not asked again. | Until you clear your browser data. |
firebaseLocalStorageDb |
IndexedDB |
Holds your sign-in session token so you stay logged in between pages. Written only if you create an account and log in. | Until you log out or the token expires. |
You can delete both at any time by clearing site data for tzortzoglou.eu in your browser settings. Clearing the theme key simply resets the site to its default appearance; clearing the Firebase entry logs you out.
3. Your analytics choice
You are asked once, on your first visit. Analytics stays off unless you actively accept — declining
is one click, exactly as easy as accepting, and nothing on the site changes either way. Your answer is remembered in
your browser under analytics-consent and never leaves your device.
Why the banner only asks about this one thing
Under Article 5(3) of the ePrivacy Directive (in Sweden, the Electronic Communications Act, lag (2022:482) om elektronisk kommunikation), consent is required before storing or reading information on your device — except where it is strictly necessary for a service you explicitly asked for.
The theme preference and the login token both fall inside that exemption, so asking permission for them would be asking a question with only one honest answer. The page counter is different: it is not necessary for anything, so it is the one thing genuinely worth your consent, and the one thing the banner controls. A banner whose buttons changed nothing would be theatre, and regulators across the EU have repeatedly acted against exactly that pattern.
Because analytics now runs on consent rather than on legitimate interest, you can also withdraw it at any time using the button above — as easily as you gave it (Art. 7(3) GDPR).
If this site ever adds anything else that requires consent — advertising, cross-site analytics, an embedded YouTube or Maps frame, a marketing pixel — it will be added to this same mechanism before it goes live.
4. Third parties your browser contacts
Some assets are loaded from other providers instead of this domain. Your browser connects to them directly, so they receive your IP address, user-agent, and the page you were viewing. None of them set cookies here, but the connection itself is a transfer of data, so it is listed in full:
| Provider | What it serves | Where |
|---|---|---|
| Google Fonts (Google Ireland Ltd. / Google LLC) | The Poppins typeface | Every page |
| Cloudflare cdnjs | Font Awesome icon set | Every page |
| Google Firebase (Google Ireland Ltd.) | Authentication and database libraries | Every page; contacted for data only when you log in |
| GoatCounter | Cookieless page-view counter | Only after you accept |
| jsDelivr | Devicon technology icons; confetti animation | Code, private area |
| unpkg | GitHub contribution calendar widget | Code |
| Vercel (hosting my own deployment of github-readme-stats) | Rendered GitHub statistics images | Code |
| GitHub | Public contribution data for the activity graph | Code |
Where these providers may process data outside the EEA, they do so under their own standard contractual clauses. See the Privacy Policy for the legal bases involved.
5. How to block them
Any content-blocking extension, or a browser in strict tracking-protection mode, will stop these requests. The site is built to stay readable without them: text, layout and navigation are served entirely from this domain. What you lose is the icon glyphs, the custom typeface, and the GitHub activity graph.
Questions about this page? Email stefanos@tzortzoglou.eu.