Privacy Policy

What this site keeps, where, and for how long.

What the site stores

This site shows the criteria corpus as static pages. There is no sign-up, no sign-in and no form, and no visitor data is stored on a server.
The pages are served by Amazon CloudFront of Amazon Web Services (AWS), with CloudFront access logs turned off.

Your theme, language choice and table-of-contents width are kept in the localStorage of your browser. They are not sent to a server.
Clearing this site's data in your browser deletes this information as well.

Grafana Cloud by Grafana Labs is used to find errors and slow spots on the pages.

What is sent: the page address, browser and OS details, errors on the page, and page load and performance metrics. A session identifier that groups one visit is kept in the sessionStorage of your browser; no cookie is used. The collector also receives the IP address the data comes from.
Transfer abroad: the recipient is Grafana Labs (United States), and the data is stored in its Tokyo region in Japan. It is sent over the internet while you use the site and kept for 14 days.
How to refuse: block requests to grafana.net with a browser extension or setting and nothing is sent. The site works the same.

Microsoft Clarity records how the pages are used, on the production site (security.nerd.kim) only. The development site does not run it.

What it collects: clicks, scrolling, mouse movement, session recordings, performance per page, the page address, and browser and device details. Recordings hide what is typed into input boxes such as the search box.
Purpose: to see where people click and where they get stuck, and improve the pages.
Transfer abroad: the recipient is Microsoft Corporation (United States), and the data is stored in Microsoft Azure. Microsoft does not name the country in its public documentation. Recordings are kept for 30 days and heatmaps for 9 months, and Clarity cannot delete one person's data alone.
Microsoft's use: under the Clarity terms, Microsoft may use this data in user profiles for purposes that include advertising.
Cookies: the site's own cookies (_clck, _clsk) and the cookies CLID, ANONCHK, MR, MUID and SM on Microsoft domains. With cookies blocked in your browser, Clarity sets none; with requests to clarity.ms blocked, it sends nothing. The site works the same.

You can ask to see, correct or delete your data, or to stop its processing. Data kept only in your browser can be deleted there directly.
The person responsible for personal data is NerdKim. Send questions and requests to the contact listed at nerd.kim.

This policy applies from October 22, 2026. When it changes, this page is updated with the new date.