Privacy

What you send me

• Letters. When you write me a letter and press "Send here", I get your name, your message and, if you add it, your email or WhatsApp number. "Send via WhatsApp" opens WhatsApp on your device instead, and nothing reaches this site.
• Comments. The name and comment you post on a blog post or case study are shown publicly under it.
• Reactions and game scores. Emoji reactions in the gallery are counted per visitor, and a mini-game score is saved with the nickname you choose.

To stop spam, each of these is stored with a one-way hash of your IP address, never the address itself.

Visit statistics

To count unique visitors (like the "Trending this week" numbers), the site sets one cookie, uxsur_vid, with a random ID that lasts a year. With it, it records which pages were viewed, the site that sent you (without query strings), your device type and a rough location from the hosting network: country, city and coordinates rounded to about 10 km. Your IP address is not stored. If your browser sends Do Not Track or Global Privacy Control, none of this is recorded.

Saved in your browser

Your language (uxsur_lang cookie), theme, layout and width choices, the name you last used on a letter and your game nickname are kept in your own browser so you don't have to set them again. They never leave your device unless you send a letter or a score.

Online tools

The tools under /tools run in your browser. Images and numbers you put in them are not uploaded or saved. Split Bill reads receipts on your device, and only downloads the text-recognition library it needs.

Why

• To read and answer your letters.
• To show comments, reactions and leaderboards.
• To see which pages are useful and where visitors come from, so I can make the site better.
• To keep spam and abuse out.

Nothing is sold, used for advertising or shared with anyone except the services that run the site.

Services involved

• Vercel hosts the site and handles every request, which includes your IP address.
• Turso stores the database (letters, comments, reactions, scores, visit statistics).
• Google Fonts and jsDelivr serve fonts and scripts to your browser.
• FlickFlick downloads come from GitHub. Purchases, when available, happen on Lynk.id or Gumroad, not on this site, and no payment details are collected here.

There are no accounts for visitors and no passwords are collected.

Your choices

You can leave the email/WhatsApp field empty, block or clear cookies and site data, or turn on Do Not Track. To have a letter, comment or score removed, write me a letter saying which one and I'll delete it.

Contact

Questions about this page: write me a letter from any page, or email hi.uxsur@gmail.com. If this page changes, the date at the top changes too.