Nothing is stored
until you say yes.
What this site collects. Who else sees it. How to have it deleted.
In force from 2 September 2026.
This site belongs to one person. Anant Desai, working as Make Them Curious, in Ontario, Canada. Anything on this page, ask me at hi@anantdesai.com and I will answer it myself.
The short version. Read the site and nothing lands on your device until you say yes. Say no and every page works the same. Use the contact form and I get your name, your email and what you wrote, because that is the only way to reply.
What is collected, and when
Before you choose
Nothing is stored on your device until you accept. The analytics tags sit behind Google Consent Mode and start denied for every visitor in every country. That is the default, and it holds wherever you are. While they are denied they set no cookie and hold no identifier. Recognising you, or joining one visit to the next, sits outside what this site can do.
Two things do load before you answer. Google Tag Manager, the container the analytics tag sits inside, which sets no cookie and measures nothing. And, while analytics is denied, Google's consent mode may send one signal that carries no cookie and no identifier. Neither can be tied to you, and neither stores anything on your device.
The server still logs the request that sent you this page: an IP address, a time, the page asked for, the browser string. Every web server on the internet keeps that log. It is how a site stays up and how attacks get stopped. This site is hosted by GoDaddy and those logs are held by GoDaddy under their own terms.
If you accept analytics
Google Analytics 4 runs through Google Tag Manager. It counts visits, notes which pages get read and for how long, roughly which country a visit came from, and what brought you here. Google shortens the IP address before it stores anything. No address ever reaches me. Nothing in the reports names a person.
The site carries no advertising. Google's three advertising signals stay denied even after you accept, because measurement here stops at counting pages.
If you use the contact form
The form asks for a name, an email address, a business name and a message. The business name is optional. All of it arrives in my inbox and stays there.
Cloudflare Turnstile checks the form for bots before it sends. Cloudflare sees your IP address, your browser string and a signal from your connection. Cloudflare's published terms say the purpose is to block bots, and that it cannot identify a person from those signals.
The form also carries a field that no human ever sees. If it comes back filled in, the message was written by a machine and is dropped. Nothing is stored.
Fonts
The typefaces are served from this domain. Nothing about the letters on this page reaches Google or anyone else. They used to load from Google Fonts, which handed Google the IP address of every visitor before that visitor had chosen anything. That call is gone.
Why I am allowed to hold it
| What | The ground | What that means |
|---|---|---|
| Analytics | Consent | You said yes, and you can take it back at any moment. The footer link reopens the choice. |
| Your enquiry | Steps before a contract | You asked me something. Answering is the whole point. |
| Server logs and the bot check | Legitimate interests | Keeping the site running and keeping spam out. Neither reads your message and neither builds a profile. |
Who else sees any of it
- Google. Analytics, and only after you accept.
- Cloudflare. The bot check on the contact form, and nowhere else on the site.
- GoDaddy. The hosting, and the server logs that come with it.
- The provider that carries email for this domain. It delivers what you send me.
Nobody else. Nothing is sold, rented, traded or handed to a data broker. There is no mailing list on this site, so there is nothing to add you to.
This site is run from Canada, and Google and Cloudflare are American companies, so anything they handle may be processed in the United States and is open to the law there. Both publish standard contractual clauses for those transfers. Google is certified under the EU to US Data Privacy Framework.
How long any of it lasts
- Analytics. Google holds the event level data for the period set on the property, then deletes it. Google offers two months or fourteen. The identifiers in your browser expire two years after your last visit, and sooner in browsers that cap cookie life.
- Your enquiry. I keep it while we are talking, and for two years after the last message, because a conversation about positioning often restarts a year later. Ask me to delete it sooner and I will.
- Server logs. Held by the host on their schedule. I have no hand in it.
- Your consent choice. Stored in your own browser. It never leaves your device and I cannot read it.
What you can tell me to do
You can ask for a copy of what I hold. You can have it corrected. You can have it deleted. You can tell me to stop using it, or to limit what I do with it. You can ask for it in a form you can take elsewhere. You can withdraw consent for analytics at any time, and withdrawing it never affects anything that already happened.
Ask by email. There is no form and no fee. I answer in thirty days, usually the same week.
If my answer is poor, complain to a regulator. This site is run from Ontario, so the Office of the Privacy Commissioner of Canada oversees it under PIPEDA. In the UK that is the Information Commissioner's Office. In the EU it is the supervisory authority for your own country. Whichever one covers where you live is the right one to write to.
Where this site stops
- Measurement stops at analytics. Advertising and remarketing have no place in it.
- Every decision about you is made by a person reading your email. Machines profile nobody here.
- Anything personal stays with me. Selling it or sharing it is off the table.
- There is no newsletter, so a list cannot pick you up by accident.
- The writing is for working adults. Under eighteens sit outside its audience, and nothing is knowingly collected from them.
If this page changes
The date at the top moves and the new version replaces this one. A change that widens what is collected will be put to you as a fresh consent choice, so you will see the banner again.
Read what this site stores for the itemised list, and the terms of use for the rest.