Bill Goldstein

Information about your use of this website is collected using server access and error logs. The collected information includes the following:

• The (non-anonymized) IP address from which you access the website;
• The type of browser and operating system you use to access our site (from the User-Agent request header sent by your user agent);
• The date and time you access our site;
• The pages you visit; and
• The addresses of pages from where you followed a link to our site.

Raw access and error logs are retained on the server for three days, and up to three prior days gzipped.

The information gathered is used to help make this site more useful to visitors and to better understand how and when this site is used.

The primary use the site author makes of server access and error logs is to inform the process of blocking bad bots.

We do not track or collect personally identifiable information (other than non-anonymized IP address), or associate gathered data with any personally identifying information from other sources.

Tracking Preference Expression (DNT) (external link) W3C Working Group Note

• DNT: 1 HTTP Request Header field value
• navigator.doNotTrack DOM property: undefined
• .well-known JSON file

  {
    "tracking": "!",
    "qualifiers": "sd",
    "compliance": [
      "https://www.w3.org/TR/tracking-compliance/",
      "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679",
      "https://www.oag.ca.gov/sites/all/files/agweb/pdfs/privacy/oal-sub-final-text-of-regs.pdf",
      "https://www.leg.state.nv.us/NRS/NRS-603A.html",
      "https://www.eff.org/dnt-policy"
    ],
    "controller": ["/about#me"],
    "same-party": [
      "billgoldstein.name",
      "www.billgoldstein.name"
    ],
    "audit": [
      "https://no-external-audits-have-been-performed.example.com"
    ],
    "policy": "/privacy",
    "config": "/.well-known/clear-site-data/wildcard"
  }

Matching the above "tracking" and "qualifers" properties, in response to a DNT: 1 HTTP Request Header, this site sends a Tk HTTP Response Header with a Tracking Status Value (TSV) of Under Construction (!) followed by TSV-extensions of Security(s) and Debugging(d): Tk: !sd.

Global Privacy Control (GPC) (external link) Unofficial Draft

• Sec-GPC: ?1 HTTP Request Header structured field value
• Sec-GPC: 1 HTTP Request Header unstructured field value

  When present, a Vary: Sec-GPC HTTP Response Header is sent.

  ISSUE: The initial spec and early implementations used an unstructured header. Spec Issue #6 Use HTTP structured field values (external link) may (hopefully) change this.

  NB: Issue 252 New principle: all new headers shall be structured headers (external link) (reflecting de facto practice) has also been opened on W3C TAG's Web Platform Design Principles (external link).

• navigator.globalPrivacyControl DOM property: undefined
• .well-known JSON file

  {
    "gpc": true,
    "version": 1
  }

  NOTE: Updated to reflect Pull #10 Add .json to the well-known URL (external link) for Issue #9 Host the GPC Support Resource at /.well-known/gpc.json (external link).

The "safe" HTTP Preference (external link) RFC8674 Informational Independent Submission (not on a standards track)

• Prefer: safe HTTP Request Header field value

When present, Preference-Applied: safe and Vary: Prefer HTTP Response Headers are sent.