Privacy policy

Here's what follows you around.

Digital Macaroni uses analytics to understand whether people read the site and where the experience gets confusing. We do not sell personal information, run behavioural advertising, or build marketing profiles from your visits.

Last updated · 3 August 2026
The tracking, in plain English

Two outside services receive data when you visit.

01

Grain Analytics

Understand which pages people read and how they move through the site.

What it receives

Page views, navigation paths, referrer, browser and device details, approximate location, session duration, scroll depth, and click interactions. Grain may also process heatmap signals and DOM snapshots when those features are enabled.

Storage

We load Grain in its default cookieless mode. It does not set tracking cookies or persist visitor identifiers in browser storage across sessions. We do not send Grain names, email addresses, or customer IDs from this site.

Grain privacy policy
02

Google Analytics 4

Measure readership, traffic sources, and basic site performance.

What it receives

Page views, sessions, referral source, approximate location, and browser, device, and operating-system information.

Storage

We configure Google Analytics with analytics storage denied. It sends cookieless measurement data but does not read or write Analytics cookies. Google signals and advertising-personalisation signals are also disabled.

Google Analytics data collection
When you contact us

Email is the only information you hand us directly.

If you email us, we receive your email address and anything you put in the message. We use it to reply, assess a software submission, maintain editorial records, or handle the request you made.

The software-submission form does not send information to our website or database. It prepares a message in your own email app. Nothing is sent until you choose to send that email.

Why we process it

Purpose and legal basis

We process correspondence because it is necessary to answer your request, and where appropriate because of our legitimate interest in running an editorial publication and keeping accurate records.

Cookieless analytics is used to understand and improve the publication. Although these services do not store identifiers on your device, the information sent to them may still be personal information under applicable law.

How long it stays

Retention

We keep emails and editorial correspondence only while they remain useful for the conversation, our records, or a legal obligation. Analytics information is retained according to our settings with Grain and Google and is deleted or aggregated when it is no longer needed.

Neither analytics service stores a persistent visitor identifier on your device. Retention of the measurement data they receive is governed by our settings with each provider.

Who gets it

Processors and transfers

We share data only with providers needed to run the site and the services described above. Grain says its primary analytics processing takes place in the EU. Google operates globally, so information may be processed outside Norway or the EEA under the safeguards described in Google's own privacy documentation.

We do not sell or rent visitor information.

Your information

You have a say.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, and to withdraw consent where consent is the legal basis.

This site does not set or use cookies. Grain runs in its default cookieless mode, and Google Analytics is configured not to read or write Analytics cookies. You can still block analytics requests in your browser without affecting your ability to read Digital Macaroni.

To make a privacy request, email hello@digitalmacaroni.io. Digital Macaroni is operated by Leif Johansen, who is responsible for the personal information described on this page.

If you believe your information has been handled unlawfully, you may also complain to the privacy or consumer-protection authority that covers you. The appropriate authority depends on where you live and which law applies. In Canada, a provincial privacy commissioner may be the right authority; in the United States, a state attorney general or state privacy regulator may be more appropriate than the FTC.

Changes

We will update this page when the site, its tracking, or the law changes materially. The date at the top tells you when we last did.