Privacy

Short version: we count pages, not people. This site works without accounts and without cookies.

What we store about visitors

We do not keep web server access logs (the web server is configured with access_log off; there is nothing to retain).

For our own visit statistics we count anonymous page views: the beacon script bundled with the site reports page loads to this same server. A page view is only counted when a real browser executes that script - crawlers and non-JavaScript clients are never counted. We store the page path, the date, a salted hash of your IP address (the salt never leaves our server, raw IP addresses are never stored), a random session identifier that is continued only while your visits stay less than 30 minutes apart, a rough browser and device class, and how long the page stayed open. No cookies, no local storage, no fingerprinting. Statistics are kept for 365 days.

For the cross-site dashboard at stats.ali.as (run by the same operator on their own server), pages additionally send an anonymized ping to Matomo: cookie-less, with IP addresses truncated before storage and Do-Not-Track respected. That is the only request that leaves this site's own infrastructure, and it carries no identifiers beyond the anonymized IP.

The "Locate me" button uses your browser's geolocation API locally; the position is never transmitted to us or anyone else.

What we publish about relays

We crawl public relays and publish their NIP-11 metadata, availability, response time, and an approximate server location (derived from the server IP and rounded to about 1 km). IP addresses themselves are never stored or published. Relay operators can opt out at any time (see About).

Index data and people

Relay operator keys and contact addresses are public protocol data supplied by the operators themselves. Processing serves network transparency (legitimate interest). If your data appears in our index and you want it removed, contact us; we remove entries from our index within 72 hours. Note that the underlying data lives on Nostr relays that we do not control.

Legal basis (GDPR)

Anonymous visit statistics (our own beacon and the Matomo ping): Art. 6(1)(f) - operating and improving the site; the IP hash is salted with a secret we keep, so it cannot be reversed.
Public relay and protocol data: Art. 6(1)(f) - network transparency, with the removal path above as your objection mechanism (Art. 21).

Third parties