No cookies. No profile of you.
These sites set no cookies, run no advertising, and never build a profile of an individual reader. One third-party script runs — a cookieless analytics beacon that counts page views in aggregate. That's the whole of it, and you can confirm every word of it in your browser's network tab.
whity.dev and docs.whity.dev only. The hosted application atapp.whity.dev is operated separately and under its own terms. If youself-host Whity, you are the data controller for your own deployment — nothing about your instance is visible to us, and this policy says nothing about it.What happens when you visit
These sites are static files. There are no accounts, no sign-up forms, no newsletter, no comment system and no contact form — so there is no mechanism by which we would receive personal information from you in the first place.
We do see aggregate traffic: roughly how many people loaded a page, which page, and which country and browser family they came from. That comes from Cloudflare Web Analytics, which does it without cookies and without identifying anyone. We cannot tell who you are, follow you between sites, or single out one reader's visits.
| Analytics | Cloudflare Web Analytics — cookieless and aggregate. No Google Analytics, Plausible, PostHog or equivalent. |
| Cookies | None set by us, and none set by the analytics. |
| Local storage | Your light/dark preference, and nothing else: whity-theme on this site, starlight-theme on the documentation site. Both hold the word light or dark, stay on your device, and are never transmitted. |
| Third-party requests | One: the analytics beacon from static.cloudflareinsights.com, injected by our host. Fonts are self-hosted; no CDN scripts, embedded videos or social widgets. |
| Advertising / tracking | None. No ad networks, no pixels, no fingerprinting, no cross-site tracking, no data sold or shared. |
| Forms | None. |
What our host necessarily sees.
These sites are served by Cloudflare Workers. To deliver a page and to protect the site from abuse, Cloudflare processes standard request data — including your IP address, user agent and the time of the request. This is inherent to how the web works: any server you connect to receives this.
Cloudflare also injects its Web Analytics beacon into these pages, which is where the aggregate page-view counts come from. It is cookieless by design: it stores nothing on your device, assigns no persistent identifier, and reports in aggregate rather than per person. We use nothing else on top of it, we do not export it, and we do not combine it with anything.
Cloudflare acts as our hosting provider and processes that data underits own privacy policy; see also their note onWeb Analytics.
Links elsewhere
We link out to GitHub, to the hosted application at app.whity.dev, and occasionally to other third-party documentation. Once you follow such a link, that site's own privacy practices apply — not ours. We have no control over, and take no responsibility for, what they collect.
There is little to exercise them against
Rights such as access, correction, erasure and portability apply to personal data a controller holds about you. The analytics described above are aggregate and carry no identifier that could be traced back to a person, so we hold nothing about visitors to these websites that we could retrieve or delete on request. You are welcome to contact us anyway if you have a question — including about data held by the hosted application, which we will route appropriately.
Getting in touch
Privacy enquiries: privacy@whity.dev. Security vulnerabilities have their own process — please use thesecurity page rather than this address.
If this policy changes, the date below changes with it. There is no mailing list to notify, by design.
Last updated: 11 September 2026 · Amro K. Saleh, Jordan