Website privacy
What this website measures.
This page is about heliotype.app, the site you are reading. What the app does with your meetings is a different question with a much longer answer — that lives on the privacy page.
The short version
- No cookies. This site sets none.
- No cross-site tracking, no ad scripts, no CDN fonts, no third-party embeds. Nothing here follows you anywhere else.
- Page views are counted — how many people read which page, and which link sent them. That is the whole of it.
- Nothing on this site can see anything about your recordings. The website and the app share a name and nothing else.
How the counting works
Analytics run on a Matomo instance that is self-hosted — the numbers land on a server the maker of Heliotype runs, not in an analytics company's product. There is no account being enriched, no data broker, and nothing sold on. It records the page you viewed, the referring link, and coarse technical facts a browser volunteers to every server it talks to, such as your approximate region and screen size. It does not attempt to identify you.
The site also carries Cloudflare Web Analytics,
fetched from static.cloudflareinsights.com. It is
cookieless, stores no personal data and no cross-site identifiers,
and counts visits without being able to build a profile.
A content-security policy on every response restricts what is allowed to run here at all; anything not named in it is blocked by your browser rather than trusted to behave.
If you write to us
Typing your address into the update form and pressing subscribe sends it to Buttondown, the newsletter service, and it is used for nothing else. Emailing hello@heliotype.app reaches an ordinary mailbox.
Buying
Checkout involves Stripe, and a Cloudflare function turns a completed purchase into your licence key. Both run only at the moment you buy, and both are described in full under Buying a license on the privacy page, because what they touch is your data rather than this site's traffic.
Opting out
Any content blocker stops the counting, and nothing on this site behaves differently when you block it — no wall, no nag, no degraded page. Deliberately not claimed here: that a browser's Do Not Track header stops it. Matomo can be configured to honour that header and Cloudflare's beacon does not document doing so, and an unverified promise on a privacy page is worse than no promise. A blocker is the reliable answer.