No sign-up, no account, no paywall, no newsletter, no form to fill in anywhere on this site.
We'd like to count visits, using Google Analytics — but nothing loads until you say yes, and declining takes one click. This page says exactly what that means in plain terms, because it would be absurd for a site about data disclosure to be vague about its own.
There is no form on this site. No login, no email field, no contact box, no comment section. We hold no name, no email address, no account, no record that is yours.
We could not contact you if we wanted to. We could not hand over your data if you asked, because there is nothing filed under you to hand over. That's not a policy commitment we're making — it's a description of what the site physically is.
Google Analytics, and only for one purpose: to see whether this page is working and which parts of it people actually use. What it reports back to us:
That's the list. There is no second purpose hiding behind the first one.
We'd rather say this plainly than bury it in a clause. Google Analytics sets a cookie in your browser, named _ga, plus one named for this site's measurement ID. It holds a randomly generated number so that if you come back tomorrow you aren't counted as a brand new person. It isn't linked to your name or your email, because — as above — we don't have those.
Nothing loads until you agree. On your first visit you'll get one small bar at the bottom of the screen with two buttons. Until you press Accept, no Google script is fetched, no request is made, and no cookie is set. This isn't a banner that quietly loads the tracker behind itself while it waits — the whole point is that it doesn't.
If you press Decline, that's remembered and you won't be asked again. And because we store your answer in your browser's local storage rather than in a cookie, someone who declines walks away with no cookie from us at all.
Changed your mind either way? There's an Analytics link in the footer of every page. It shows your current setting, and clicking it lets you switch. If you turn it off after having it on, we delete the Google cookies at the same time — withdrawing consent should be an action, not a promise.
Approximate location is derived from the IP address your browser connects with. Two things worth being precise about, since precision is rather the point of this website.
It identifies a network connection, not a person. It tells us a device connected from somewhere near a particular city. It doesn't know who was holding the device. It's often accurate only to a region, and it's frequently wrong — a VPN, a corporate network, or a mobile carrier can place you in an entirely different city or country.
Google Analytics 4 uses the IP address to work out that coarse location and does not log or store the IP address itself. We never see an IP address at any point.
Why we want it at all: we intend to publish this site in several languages. Knowing which countries the traffic comes from, and which languages browsers are set to, is how we decide which languages to do first. Translating into the wrong five languages would be an expensive way to help nobody. That is the entire use.
A detail most sites get wrong, and worth explaining because it's the same mistake this whole website is about.
The usual way to use a web font is to link to Google's font service. It's one line and it's free. It also means that every visitor's browser contacts Google's servers before a single word appears — handing over an IP address and a referring page, on arrival, with no consent asked and no way to decline. A German court awarded damages over precisely this in 2022.
So the fonts on this site are served from this site. Nothing is fetched from Google, or anyone else, when the page loads. The only third-party request this site can make is Google Analytics, and only after you've pressed Accept.
The practical upshot: if you decline, or never answer, no external party learns you were here at all. That's a stronger claim than "we don't track you", and it's the one worth checking on any site that makes it — open your browser's network tab and see who gets called.
The site is served by Cloudflare Pages. Like every web host, Cloudflare handles the network request that delivers this page to you, which necessarily involves your IP address, and it keeps short-lived operational logs for security and abuse prevention. That's a function of how the internet works rather than a choice we made about you, and neither we nor anyone else uses it to build a profile.
We mention it because a privacy page that claims nobody anywhere sees anything would be overstating it, and we'd rather be accurate than impressive.
All of these work, and none of them break the site:
The share images are free to download, post, print and edit. No attribution required, no permission needed, no licence to read. We only ask that the dontpastethat.com footer stays on them.
We don't track downloads. The PNG conversion happens inside your own browser — the file is built on your machine and never travels to a server, ours or anyone else's.
This site is published and paid for by Golonex AI, which does AI governance and security compliance work for regulated teams. We built it because we kept having the same conversation, and a link was faster than repeating it.
That's the commercial interest, stated plainly: if this page is useful, you might remember who wrote it. There's nothing else behind it.
Questions about anything on this page — get in touch.
Last updated 3 August 2026. If any of this changes, we'll change this page and move that date.