Privacy

What the counter records

Daily totals for anonymous browser visits, refreshes, approximate countries and states/regions, page loads, active time, section views, scroll milestones, engaged page views, product previews, Etsy and selected other link clicks, broad referring-source categories, screen-size categories and page-load timing.

Active time means a visible, focused page with recent interaction; visits are grouped until 30 minutes of inactivity, and at least 10 active seconds across pages marks an engaged visit. These are browser visits, not verified individual people. Section views indicate exposure, not proof that text was read.

What it does not record

No visitor IDs, fingerprinting, session recordings, mouse trails, form contents, names, email addresses, stored IP addresses, full referrer URLs, URL query strings or cross-site browsing histories. We do not connect these totals to purchases or customer records. No third-party analytics service receives these counters.

The web host and security provider necessarily receive network requests and may keep their own operational or security logs. Contact forms, embedded media and Etsy have separate services and privacy practices; this page describes our first-party website counter, not all third-party processing.

Your browser’s privacy choice

The counter does not run when your browser sends Global Privacy Control or Do Not Track. Blocking JavaScript or the analytics endpoint also prevents collection. The owner can also exclude a browser from /stats. That preference uses a one-year cookie; it must be enabled separately on each device/browser and does not remove past counts.

Local visit grouping and location

The browser stores only a recent activity timestamp, accumulated active seconds and an engagement flag. No identifier is sent to the server. This state resets after 30 minutes of inactivity; if storage or safe cross-tab coordination is unavailable, page views are counted without guessing visits. Clearing browser storage starts a new visit.

The server uses the network IP temporarily for a local country/region lookup, then discards it from the counter. It does not send visitor IPs to a geolocation service or store them in analytics. Only daily geographic aggregates remain. Locations are approximate: VPNs and mobile networks can place visitors elsewhere. IP Geolocation by DB-IP, using its licensed Lite database. Basic automation filtering is imperfect.

Storage and access

Only daily aggregated numbers are saved, outside the public website, with password-protected owner access. They are retained for long-term comparisons; because there is no visitor identifier or individual history, they cannot be retrieved as a particular person’s record.

Forms, fonts and other services

The contact form and the “Notify me” form on [creations] are delivered by Formspree, which receives what you type (such as your email address, message and the product you asked about) so it can forward it to us. We use those details only to reply or to tell you when that product is available.

The Work with us form is delivered by Formspree in the same way. It sends your name, email, company, subject and message, and we use them only to reply about working together.

The Old tech form is delivered by Formspree in the same way. It sends your name, email, US state, ZIP code and the details you give about your items, and we use them only to reply and to arrange shipping and the reimbursement of your shipping cost.

Fonts and scripts are served from this website; no request goes to Google Fonts or a public script CDN. Video thumbnails load from YouTube (i.ytimg.com) and customer review photos from Etsy (i.etsystatic.com); following a link to YouTube, Etsy or the forum takes you to their own services.

Cloudflare, which delivers this website, adds its cookieless Web Analytics script (static.cloudflareinsights.com). It reports page views and page-load performance to Cloudflare without cookies or local storage; it is separate from the counter described above. See Cloudflare Web Analytics.

To protect the owner sign-in at /stats, failed sign-in attempts are counted per network using a salted, irreversible hash of the IP address that expires after 15 minutes. It is never combined with the website counter.

[creations] subdomain

Creations shares this aggregate counter with the main website. Anonymous visits are grouped separately on each hostname, so visiting both can count as two browser visits. The browser-exclusion preference applies to both bankasimedia.com and creations.bankasimedia.com through a secure preference cookie; it contains no visitor identifier.