Preview mode — showing sample data. Real content appears once a database is connected.

Privacy Policy

Effective from 24 August 2026.

Summary

This site is run by Laras Anindita, S.E., M.M. as a personal academic blog. Visitor privacy matters, so the site is deliberately designed to collect as little data as possible:

  • The site’s in-house analytics work without cookies and without storing IP addresses.
  • The site uses Google Analytics 4(optional, switched on by the site owner) to understand overall visit patterns. Google sets cookies in your browser for this. How to opt out is in the "Your rights" section below.
  • No Meta Pixel, session replay, or other third-party tracking services.
  • No data is sold or shared with third parties (beyond the services named on this page).

Data we collect

1. Visitor statistics (in-house analytics)

To learn which pieces are read most and where visitors come from, the site records page visits in a way that is deliberately designed without cookies:

  • Your IP address and browser User-Agent are used for a moment to compute an anonymous fingerprint (a hash) — then discarded straight away. The raw IP is never stored in the database.
  • That anonymous fingerprint uses a salt (a random key) that changes every day, so the same visitor on different days produces a different number — it cannot be tracked across days.
  • What is stored: the page path opened (for example: /tulisan/article-name), the country code (2 letters, for example "ID"), the referring host (for example "google.com" without search parameters), the date, and that anonymous fingerprint.
  • Visits from search-engine bots, the admin, and repeat requests from the same fingerprint are not counted twice.

2. Comments

The comment form asks for a display name and the comment itself. Both are stored permanently and shown publicly after moderation. An anonymous fingerprint (the same as above) is used to prevent spam — and deleted automatically after a set period.

A random token (not a cookie, not your IP) is kept in your browser’s local storage to prevent duplicate "likes" on the same comment. This token is not sent to any other server.

3. Contact

The Contact page only shows links to email, academic profiles (Google Scholar, ORCID, ResearchGate), and social media. The site has no form that collects email addresses or visitor data.

4. Admin login

The admin login (for the site owner only) uses an httpOnly session cookie issued by Supabase. This cookie does not apply to ordinary visitors and is only issued after a successful login.

5. Google Analytics 4

The site uses Google Analytics 4 (GA4) to understand overall visit patterns — which pages are read most, which sources visitors come from, and from which countries. This data helps the site owner decide which topics deserve more depth.

  • Google sets cookies in your browser (with names such as _ga and _ga_<ID>) that last several months, to recognise repeat visits anonymously.
  • Data sent to Google includes: the page address, the referrer, approximate location (city/country from the IP address), and the device and browser type. Google processes the IP address without storing it (a built-in GA4 feature).
  • This data is not used to personalise ads — Google Signals and sharing with Google’s advertising products are switched off for this property.
  • How Google works & its policy: policies.google.com/privacy.

Third-party services

The site runs on a few services that process technical data (not visitors’ personal data) for operational purposes:

  • Netlify (hosting) — keeps standard server access logs (IP, user-agent, path, time) for security and abuse prevention. Their policy: netlify.com/privacy.
  • Supabase (database) — stores the site’s content and the anonymous analytics fingerprints. Their policy: supabase.com/privacy.
  • Resend (transactional email) — used ONLY for automated emails to the site owner (e.g. security-anomaly alerts). It does not receive email from visitors.
  • Google Analytics 4(analytics) — see the details in item 5 of "Data we collect" above. Google’s policy: policies.google.com/privacy.

Your rights as a visitor

  • Ask what data is stored about you. Because the site does not store your identity, the answer is usually: none. Unless you have written a comment (name + comment).
  • Request deletion of your comments — email the site owner using the address on the Contact page.
  • Opt out of the in-house analytics — install a browser extension that blocks requests to analytics domains, or turn off JavaScript. The site remains readable without either.
  • Opt out of Google Analytics 4 — install the Google Analytics Opt-out Browser Add-on (official, from Google), use a blocking extension such as uBlock Origin / Privacy Badger, or turn on "Do Not Track" in your browser.

Changes to this policy

This policy may change if the way the site works changes (for example, adding a newsletter or a new service). Major changes will be announced by updating the effective date above and, where needed, a note on the home page.

Contact

Questions about this policy can be sent to the site owner through the Contact page.