Privacy & cookies

This site has no accounts, no login, no comments, no newsletter and no forms. Nothing is asked of you and no download requires an email address. It does use Google Analytics, which loads on every page and sets cookies. There is no consent banner, so this page is where that is disclosed and where the ways to switch it off are set out.

Last reviewed 2026-08-11.

The short version

What	When	Why
Google Analytics 4, with cookies	On every page view, from the first one	To see which pages and which files people actually use
Server request logs at Cloudflare	Every request, unavoidably	Serving the page at all, and blocking abuse
One `localStorage` entry per checklist you tick	Only if you tick a checklist	So your progress survives a reload. It never leaves your browser

Cookies, and the absence of a banner

There is no cookie banner on this site, and analytics is not switched off by default. Google Analytics loads with the page and sets its own cookies on your first visit, which is how it tells a returning visit from a new one. That is disclosed here rather than in a pop-up, and it is stated plainly because the alternative — a banner that appears while the tracker is already running — tells you less than this sentence does.

The cookies are Google's rather than this site's. Their names, purposes and lifetimes are documented by Google, and that documentation is the accurate source rather than a list retyped here and left to go stale: Google's tag platform privacy documentation .

Nothing else on this site sets a cookie. There is no session cookie, no preference cookie and no third-party embed: the one webfont is served from this domain, and the checklists keep their ticked state in localStorage, which never leaves your browser and is not sent to any server.

How to switch it off

Since there is no banner to decline, the controls are the general ones — and all of them work on this site, because there is nothing here that depends on analytics running:

Google's own opt-out. The Google Analytics Opt-out Browser Add-on prevents your data being used by Google Analytics on every site, not just this one. Google publishes it for Chrome, Safari, Firefox and Edge.
Block the script. Any content blocker or privacy extension that blocks googletagmanager.com stops the collection at source. Every page, table, checklist and download here works identically with it blocked — none of them needs JavaScript from Google.
Block or clear the cookies. Your browser's site-data settings will remove what has already been set and can refuse it in future. Blocking third-party or all cookies for this domain breaks nothing on it.
Browser privacy modes. A private window discards the cookies when you close it, and several browsers block this kind of measurement by default.

One thing worth being straight about: this site does not act on Do Not Track or Global Privacy Control signals, because Google Analytics does not, and saying otherwise would be a claim about behaviour that is not ours to make.

What Google Analytics receives

Google Analytics collects the ordinary set: the page you are on, the referring page, approximate location derived from your IP address, and general device and browser information. It is used in aggregate — the questions being asked are "which resources get used" and "which pages get found", not anything about an individual. No name, email address or account is involved, because the site has no way of collecting one.

This site displays no advertising, runs no remarketing and builds no audience lists. If you would rather Google did not use your activity across sites for personalisation, that is controlled at Google's end rather than at this one: Google's own ad settings.

Google acts as a data processor for this data and also processes it for its own documented purposes. Their handling is described in Google's privacy policy. Data may be processed outside the UK and the EEA, under the transfer mechanisms Google operates. The retention period is whatever is configured in the Google Analytics property; Google's own documentation describes the available settings and the default.

Server logs

This site is hosted on Cloudflare Pages. Serving a page necessarily involves receiving a request containing your IP address, and Cloudflare keeps request logs and uses them for delivery, caching, and protecting the site from attack and abuse. This is not optional and no consent banner can make it so — it is the mechanics of a web request rather than a tracking choice. Cloudflare's handling is described in Cloudflare's privacy policy.

Aggregate request counts per file — how many times a given spreadsheet was downloaded — come from these logs rather than from any script in your browser. That measurement works whether or not you allow analytics, involves no cookie, and cannot identify you.

What this site does not do

No accounts, no login, no profile.
No forms, no newsletter, no email capture. Downloads never ask for an address.
No advertising, no remarketing, no audience lists, no data selling or sharing for ads.
No affiliate links at the time of writing — see the affiliate disclosure, which commits to marking them at the point of the link if that ever changes.
No embedded videos, no social widgets, no comment system, no chat widget, no font CDN. The one webfont is served from this domain.
No fingerprinting, no session recording, no heatmaps, no A/B testing script.

Children

This site is written for people doing marketing work professionally. It is not directed at children and it collects nothing intended to identify anyone's age.

Your rights

If you are in the UK or the EEA, data protection law gives you the right to ask what is held about you, to have it corrected or deleted, and to object to or restrict processing. Objecting to analytics needs no request at all: the four routes under how to switch it off take effect immediately and without asking anyone's permission.

For anything else, or to ask a question about this page, use the routes on the contact page. Analytics data here is aggregate and not linked to a name, so in practice a request about your own record is usually answered by the fact that there is nothing identifying to retrieve.

You also have the right to complain to a data protection authority in your country if you think something has been handled wrongly.

Who is responsible

This site is written and run by Alston Antony — see about for who that is and contact for how to reach him.

Changes

Material changes will move the review date at the top of this page. This page is maintained alongside the code it describes rather than as a separate document, which is why it can be specific about what does and does not load.