How we count

What a visitor is

A visitor is one HMAC-SHA256 hash of the IP address and the browser's user agent together, salted with a secret that only this server holds. Neither the address nor the user agent is written anywhere: they are inputs to a one-way function and are discarded the moment it has run.

The user agent is part of it because an address is not a person. Behind a mobile carrier an entire city can share one address, and counting that as a single visitor would understate the audience by orders of magnitude. Nothing is written to your browser to make this work — no cookie, no local storage, no identifier of any kind.

Visitors · 7 days counts those hashes once each inside a rolling week.Unique visitors counts them once each since the record began, however often somebody came back.

What a page view is

One page served to a person, refreshes included. Three things that look like page views are deliberately excluded, because each of them would count a page nobody read:

• Redirects. A link written with a trailing slash produces a redirect and then the real request. That is one page read, not two.
• Prefetches. The browser fetches a page when the pointer settles on a link, so the click that follows is instant. If the click never comes, nobody read it.
• Requests that render nothing. An uptime check asks for the headers and no page.

Known bots and error responses are recorded and then left out of every published figure. They are recorded rather than dropped because "how much of that spike was a crawler" is a question only rows that exist can answer.

What a prompt copy is

One press of a copy button or an open-in-agent link on an entry's page. It counts the action, not the person: somebody who copies a prompt and then opens it in an agent counts twice, because both are things they did.

Sponsor slots

A card impression is a slot that reached the screen, not a page that happened to contain one. A rail below the fold that nobody scrolled to was never seen, and a sponsor billed for it would be billed for nothing. Impressions are summed across every slot on screen, so a page showing five slots is five impressions.

What is never collected

No raw IP address. No raw user agent. No cookie, no local storage, no browser fingerprint. No third-party analytics script, no advertising pixel, and no request to any other company's server — there is no other company involved. Nothing collected here is shared, sold or sent anywhere.

Where a country appears at all, it is resolved from a database file on this server. No geolocation service is ever contacted.

Why the numbers can be trusted

The tables these figures come from are append-only, and that is enforced by the database itself: an attempt to change or delete a recorded event fails outright rather than quietly succeeding. A wrong value is corrected by recording a correction, which leaves both the mistake and the fix in the record.

Days are UTC days everywhere, so a figure labelled "today" means the same thing wherever it is read.

What is measured but not published

More is recorded than is shown: which pages are read and for how long, which searches found nothing, which entries have their prompt copied. A signal that is not captured on the first day starts from zero the day somebody thinks to capture it, and a missing year cannot be bought back later.

The statistics page publishes the part that is worth reading today. The rest stays on the server, and more of it appears there as there gets to be enough history to make it mean something.