Privacy

This site is a set of static files. It has no accounts, forms, comments or newsletter. It sets no cookies of its own and loads no third-party trackers or embeds, and its fonts and images come from this domain. This page covers the little personal information it does touch.

I’m the responsible party for this site under the Protection of Personal Information Act (POPIA), and its information officer: Chad Norman, Cape Town, South Africa. You can reach me at hello@chadnorman.fyi.

Cloudflare serves this site. To deliver each page and protect the site from attacks and abuse, Cloudflare processes your IP address, your browser’s user agent, the URL you request and related request details. Cloudflare keeps its own logs of these requests under the Cloudflare privacy policy, which also sets how long it keeps them.

I use Cloudflare Web Analytics to count visits. Its script loads only on chadnorman.fyi, and only after the page has finished loading. It sets no cookies, uses no local storage and does not fingerprint you. It reports aggregate counts: page views, referrers, countries, browsers and page-load performance. I see totals, not individual visitors.

If you block the script, nothing on the site stops working.

The site sets no cookies, and Cloudflare’s Bot Fight Mode is off. If Cloudflare ever challenges a request as suspicious, it may set a cf_clearance cookie that records that you passed the challenge, so you are not challenged again. The cookie is strictly necessary to reach the site, so there is no consent banner. Cloudflare’s cookie list describes it.

The theme toggle remembers your light or dark choice in your browser’s local storage. It stays on your device and the site never sends it anywhere.

If you email hello@chadnorman.fyi, Cloudflare Email Routing forwards the message to my mailbox provider, where I read it. I keep your email only as long as I need it to reply.

Cloudflare runs a global network, so it processes some of this information outside South Africa. Section 72 of POPIA allows that when the recipient is bound by a law, binding corporate rules or a binding agreement that gives adequate protection. For Cloudflare, that agreement is its Data Processing Addendum.

Under POPIA you can ask me whether I hold personal information about you and for a copy of it. You can ask me to correct or delete it, and you can object to my processing it. Email me at hello@chadnorman.fyi and I’ll answer.

I can’t see or delete the request logs Cloudflare keeps. Its privacy policy explains how to ask Cloudflare directly.

If you’re not satisfied with my answer, you can complain to the Information Regulator (South Africa). Its complaints page explains how, and its website is inforegulator.org.za.

When anything here changes, I’ll update this page and the date at the top.