Privacy and cookies
Without consent
We set no cookies and read nothing from your browser. The server only records what it receives with every request anyway, on the basis of legitimate interest (security, abuse prevention, usage statistics), kept 90 days:
- time, page, method, status code and processing time
- IP address truncated (last part removed: /24 or /48) and the matching country and provider
- browser, operating system and device type (from the user agent) and your preferred language
- the domain of the referring site
- a daily code to count unique visitors per day (cannot be traced back to your IP; the key changes every day)
- the site you check and your chosen options
With consent ('Accept')
In addition, kept 12 months:
- a session code in the cookie cmc_sid (1 year), to link pages within a visit
- your full IP address, the full referrer and technical request headers (client hints such as platform version)
- screen and window size, pixel density, colour depth, time zone, languages, platform, CPU cores, memory, touch, dark mode, connection type and load times
- clicks on buttons and links (text and target, never what you type), time on page and scroll depth
No third-party trackers, no advertising and no canvas or font fingerprinting. Data stays on our own server (Hetzner, Finland) and is not shared.
Browser extension
The CheckMyCookies extension (only needed when our server cannot measure a site) observes, in an incognito window, while you visit the site under examination. It only collects observations about that site: cookie names and attributes (domain, path, expiry, Secure/HttpOnly/SameSite — never cookie values), cookie names from Set-Cookie headers with the address (URL) of the request that set the cookie, hosts and types of network requests, storage key names, the text of buttons you click in the banner, screenshots of that site and the text of its cookie statement, plus the extension and browser version. Nothing is sent until you click ‘Send to CheckMyCookies’; then it goes only to checkmycookies.org for that one scan. It is kept like any scan (30 days), not sold and not shared. The extension does not read other tabs, browsing history or any data outside the incognito measurement window.
Your choice
The cookie cmc_consent (6 months) remembers your choice; it is a functional cookie.
Questions or requests for access/deletion: info@icthorse.nl.