What we keep, and why

Hands in Jars is a household-scale site, and we run it ourselves. This page says, in plain words, what the site records when you visit and what we do with it.

When a page loads, our server writes one line to a visit log: the page address, the page you came from (if your browser sends it), your browser's user-agent string, and your IP address as passed to us by Cloudflare. We set one first-party cookie, hij_vsid, that lasts 30 days and lets us tell one visit from the next; while a tab is open it checks in every thirty seconds so we can see how long pages get read. That's the whole of our analytics. We keep those rows until we prune them, and we're the only ones who look.

If you drop a note, make a wish, or book a session, we store what you typed along with your name and email if you gave them. We use them to reply, and for nothing else. We don't build lists, and we don't hand them on.

The rating-and-vote card asks for a name and email so we can draw a winner for the free cookies. That's the only thing they're used for.

Voting in a poll sets a small cookie so the same browser can't vote twice. It holds no name and nothing about you.

No third-party analytics, no ad pixels, no tracking scripts. The site sits behind Cloudflare, which handles traffic on our behalf and keeps its own connection logs under its own policy. Some pages load fonts and layout libraries from public content networks (Google Fonts, jsDelivr); your browser fetches those directly.

Want to know what we hold about you, or want it gone? Write to [email protected] and we'll sort it out.