Merge pull request #120 from bits-bytes-nn/privacy-notice

Privacy notice; GA without Google signals or ad personalisation

Author: bits-bytes-nn

_includes/footer.html

@@ -41,7 +41,7 @@ <h2 class="footer-heading">{{ site.title }}</h2>
     </div>
 
     <div class="site-signature">
-      <p class="rss-subscribe text"><strong>Subscribe <a href="{{ "/feed.xml" | prepend: site.baseurl }}">via RSS</a></strong></p>
+      <p class="rss-subscribe text"><strong>Subscribe <a href="{{ "/feed.xml" | prepend: site.baseurl }}">via RSS</a></strong> · <a href="{{ '/about/#privacy' | prepend: site.baseurl }}">Privacy</a></p>
       <p class="text" lang="{{ site.lang }}">{{ site.description }}</p>
     </div>
 

_includes/head.html

@@ -305,14 +305,19 @@
 		crossorigin="anonymous"></script>
 	{% endif %}
 
-	<!-- Google Analytics, on the deployed build only: a local serve would count as traffic. -->
+	<!-- Google Analytics, on the deployed build only: a local serve would count as traffic.
+	     Google signals and ad personalisation are off: this site shows no ads and
+	     needs page counts, not cross-site profiles (see About, "Privacy"). -->
 	{% if site.ga_tracking_id and jekyll.environment == 'production' %}
 	<script async src="https://www.googletagmanager.com/gtag/js?id={{ site.ga_tracking_id }}"></script>
 	<script>
 		window.dataLayer = window.dataLayer || [];
 		function gtag(){dataLayer.push(arguments);}
 		gtag('js', new Date());
-		gtag('config', '{{ site.ga_tracking_id }}');
+		gtag('config', '{{ site.ga_tracking_id }}', {
+			allow_google_signals: false,
+			allow_ad_personalization_signals: false
+		});
 	</script>
 	{% endif %}
 

about.md

@@ -27,3 +27,22 @@ If something here sparks a thought, I'd love to hear it — reach out through an
 - **GitHub** — [bits-bytes-nn](https://github.com/bits-bytes-nn)
 - **LinkedIn** — [Jonas Kim](https://www.linkedin.com/in/aldente0630)
 - **Threads** — [@aldente0630](https://www.threads.com/@aldente0630)
+
+## Privacy
+
+This blog has no accounts, comments or ads, and keeps no data of its own. What
+your browser shares while you read:
+
+- **Google Analytics** counts page views: the page address, the referring page,
+  your device and browser type and an approximate location. It sets first-party
+  cookies (`_ga`, `_ga_*`) that last up to two years. Google signals and ad
+  personalisation are turned off. To opt out, block those cookies or use
+  [Google's opt-out add-on](https://tools.google.com/dlpage/gaoptout).
+- **Fonts and libraries** load from Google Fonts, jsDelivr and unpkg, which see
+  your IP address as part of serving them.
+- **Paper reviews** ask Semantic Scholar for the paper's citation count, and
+  some posts show figures hosted by their original sites (arXiv and others).
+- **Your browser** keeps your theme choice and cached citation counts in local
+  storage; nothing leaves your device for those.
+
+Questions or requests: [{{ site.email }}](mailto:{{ site.email }}).