We count visits. We cannot tell who you are.

Who is responsible

This site is run by Flavio Copes, an individual based in Italy, who is the data controller for the purposes of the GDPR. For anything on this page, write to [email protected].

Analytics

Knowing which playbooks people actually reach is what tells us which ones to keep accurate, so the site counts page views usingPlausible. It runs on our own server at b.flaviocopes.com rather than on anyone else's service, so the figures are not sent to an analytics company, an advertising network, or any other third party. Nobody sells or profiles this data because nobody else ever sees it.

Each page view records only:

• the page address, and the site you arrived from, if any;
• your browser, operating system, and whether you are on desktop, tablet, or phone;
• your approximate location, derived from your IP address and no more precise than city.

When you leave a page, one further measurement is sent: how long you stayed and how far down you scrolled. That is how we tell a playbook people actually read from one they open and immediately abandon. It carries no identifier either, and is not tied to the page you go to next.

Your IP address and full user agent are used to work that out and are then discarded rather than stored. Unique visitors are counted with a hash that is thrown away and regenerated every 24 hours, which means there is no way to recognise you tomorrow, on another device, or on another site. Plausible sets no cookies and writes nothing to your browser at all. Plausible's owndata policydocuments this in full, and the software is open source, so the claims can be checked rather than taken on faith.

Because none of this is personal data and no cookies are involved, there is no consent banner to click. If you would still rather not be counted, seeopting out below.

What stays on your device

Some pages remember your choices so the site is less annoying to use. All of it is written to your browser's local storage, which means it stays on your device and is never transmitted anywhere. We cannot read it. It is not a cookie and it is not sent with any request.

• disasterlab:checklist:* — which preparation items you have ticked off, one entry per playbook.
• disasterlab:country — the country you picked, so procedures show the right police, carrier, and regulator without asking again.
• disasterlab:platform:* — whether you chose Windows, Mac, iPhone, Android, and so on, so the right tab opens next time.

Clearing your browser's site data for this domain erases all of it immediately and permanently. Nothing is kept anywhere else, so there is no copy for us to delete.

Opting out of the count

The analytics script checks your browser's local storage for a flag before recording anything. To exclude yourself permanently on this device, open your browser's developer console on this site and run:

localStorage.plausible_ignore = "true"

That value stays on your device, is never sent anywhere, and stops page views being counted until you remove it. Any content blocker that blocks analytics scripts works equally well, and blocking it breaks nothing on the site.

What the servers see

The site is a set of static files hosted on Cloudflare Pages, and the analytics endpoint sits behind Cloudflare too. Like any web server, Cloudflare processes your IP address and request details to deliver pages and to block attacks. That is a technical necessity of serving a website rather than a choice we made to gather data. We do not receive per-visitor logs from it, and we do not combine it with anything else.

Cloudflare's own handling is described in its privacy policy.

Where your browser connects

Every asset that builds the page — styles, scripts, images, fonts — is served from this domain. There are no embedded videos, no hosted font services, no comment widgets, and no social buttons. The only other origin your browser contacts isb.flaviocopes.com, our own analytics server described above. The site's Content Security Policy permits those two and forbids everything else, so a request to an unexpected third party cannot happen by accident.

Playbooks do link out to police forces, banks, regulators, and carriers. Those are ordinary links, and following one takes you to an organisation with its own policy and its own logging. We have no relationship with them and receive nothing back when you click.

Your rights

The GDPR gives you the right to access, correct, erase, and port your personal data, to object to processing, and to complain to a supervisory authority. We mention them because you have them, not because there is much here to exercise them against: the analytics hold no identifier, so there is no record we could find, send you, or delete even if you asked, and nothing that could be linked to you in the first place.

If you email us, we will have your email and whatever you wrote in it, which we keep only to reply and delete once the exchange is finished. If you believe your data has been mishandled you can complain to the Garante per la protezione dei dati personali, or to the authority in your own country.

Children

The site is not aimed at children and collects no personal data from anyone, so no age verification is needed or performed.

Changes

If this stops being accurate, the page is updated before the change ships and the date at the top moves. That is not a slogan: this page previously said the site had no analytics at all, and it was rewritten in the same change that added them. There is no mailing list to notify, because there is no mailing list.