Privacy

We measure traffic with Umami, which we run ourselves on our own server. Umami sends nothing to Google, to an ad network, or to a third-party analytics company. It is the one measurement we control from end to end. Your traffic does pass through Cloudflare, the network in front of the site, before it reaches us, and that has its own section further down.

It records the page you looked at, the site that referred you, your screen size, browser, operating system and country. Your IP address is what those get worked out from, and it also tells one visit from another. It never appears in the reports we read.

No ad pixels. No social-media pixels. Nothing here builds a profile of you or follows you anywhere else.

We are also recording how people use the map. Mouse movement, clicks, scrolling, which bits of the interface get touched. It plays back as an anonymous session, which is how we find out where the map confuses people or falls over completely.

This is temporary on purpose. The map is being reworked, watching real sessions is the fastest way to find what is broken, and the recording goes off once that work is finished. What gets captured is your interaction with this page. Nothing from the rest of your screen, and no account or identity to hang it on, because there is none.

Would rather not be recorded? The opt-out below kills the recording and the page counting together.

Umami respects a flag you can set yourself. Open your browser's developer console on this site and run:

localStorage.setItem('umami.disabled', 1)

From then on this browser sends us nothing at all. We have also turned on Umami's Do Not Track support, so a browser sending a Do Not Track header gets skipped with no effort from you.

Since 2 August 2026 the site sits behind Cloudflare, a content delivery network. It serves pages from a location near you so they load faster, and it soaks up abusive traffic before it reaches our server. The trade for that is where the connection ends. Cloudflare handles it first and decrypts it, so it sees every request you make here, your IP address included, before handing it on to us.

Cloudflare also runs its own analytics on the site. It is cookieless, it stores nothing on your device, and Cloudflare states that it does not fingerprint you or follow you across other sites. It measures page loads and how fast they were. This is separate from the Umami measurement above, and we are keeping both for now because the speed and the protection are worth the second count.

What Cloudflare does with what it handles is governed by its own privacy policy, linked above, rather than this page.

Browsing PlexWyn sets no cookies. The analytics do without them, and we read the scripts ourselves rather than taking the vendor's word for it: neither the page counter nor the session recorder writes a single thing to your browser. The one value either of them reads is the opt-out flag above, which is there because you put it there.

Nothing is stored on your device, so there is no cookie banner to click through. Storage is all that sentence covers. Your visit is still measured, in the ways the two sections above describe.

One cookie does exist in the software: a signed session cookie, issued when an administrator logs in to the private admin area. Anyone who isn't an administrator will never receive it.

There are no public user accounts. Registration doesn't exist, so the system holds no name, email address or password of yours unless you sent one to us yourself.

Search crawlers. When a request arrives from a crawler we recognise (Googlebot, Bingbot, GPTBot, ClaudeBot and the rest), we record its name, the path it asked for, its user-agent string and its IP address. That log is how we see which pages are getting indexed. Requests from ordinary browsers stay out of it.

Server logs. Like any website, the web server keeps standard access logs, which include IP addresses. They are used for operating and debugging the site.

Searches. What you type into the search box runs the query and then goes nowhere. We store none of it.

Company logos. Every logo is stored on and served from our own servers. Your browser does not contact anyone else to display them.

It used to work differently. Most logos loaded through Google's favicon service, which handed Google your IP address, and since the company's domain sat right there in the request, it could tell which company pages you were reading. That has stopped. We have left the paragraph up instead of quietly deleting it, because it was true of this site until recently and you deserve to know that.

The contact form. The form on our contact page runs on SplitForms, a third-party form service. Whatever you type in, your email address included so we can write back, passes through them on the way to us. Please keep anything confidential out of it.

Outbound links. Company pages link to companies' own sites. Once you follow one, their privacy practices apply, not ours.

The index describes organisations rather than private individuals. Where a record names a person, it is in a public business capacity: a founder listed in a company's own material, or someone quoted in published news.

Think something we publish about you is wrong, or shouldn't be up at all? Write to us and we will look at it.

Ask what we hold about you, ask us to correct it, ask us to delete it. Given everything above, the honest answer will usually be that we hold nothing which identifies you in the first place.

Send any privacy question through the contact page.

PlexWyn is in alpha and has yet to launch publicly. Before it does, this page will name the organisation responsible. Change the page, change the date at the top.