privacy first zero analytics

Origin

I installed Google Analytics once, years ago.

I saw numbers: 42 visitors, 3 minutes average, 68% bounce rate. But I didn’t know who they were. I didn’t know what they thought. I didn’t know if they found what they were looking for.

Those numbers were ghosts. Data extracted without context. Information that made me complicit in a system that treats people as products.

I uninstalled everything. I deleted the script. I breathed.

Today my httpd server generates logs. But they are security logs, not profiling logs. They serve to identify intrusion attempts, not to sell your attention.

The Connection

Why does the Monolith archive this? Because privacy is not a setting. It is an architecture.

I don’t use cookies. I don’t use analytics. I don’t use tracking pixels. I don’t use heatmaps. I don’t use session recording.

I only know this:

• Someone loaded a page (access log).
• The server responded with an HTTP code (200, 301, 404).
• If there was a repeated 404 error, I might need to fix a broken link.

That’s it.

The connection is ethical: if I don’t need to know who you are to provide the service, I don’t ask. Period.

Digital sovereignty is not just “owning your own data”. It is also “not stealing other people’s data”.

The Challenge

The inner doubt was: “But how do I know if the site works? If people read?”

The answer: you don’t need to.

If you write valid content, people come back. If the site is fast, they appreciate it. If it’s useful, they share it.

I don’t need a dashboard to know that an article works. I need:

• Emails from readers (tiziano@tizianogasparet.com).
• Webmentions from other IndieWeb sites.
• Direct reports.

The challenge was accepting uncertainty. Accepting not having total control over metrics. Accepting that “not knowing” is a form of respect.

Peace of Mind

Now that I have written this, I have clarified the contract with those who visit the Monolith:

• I don’t track you.
• I don’t profile you.
• I don’t sell your attention.
• I don’t use invasive cookie banners.
• I don’t slow down the site with analytics scripts.

Peace of Mind comes from knowing that my digital space is clean. Not just technically (OpenBSD, httpd, zero dependencies). But also ethically.

If you read this article, thank you. If you come back, better. If you share it, great.

But I will never know. And that’s fine.

Technical Note:

• httpd logs: kept for 7 days, then automatic rotation
• Log purpose: security (identify brute-force, suspicious 404s)
• Zero cookies: verifiable via DevTools → Application → Cookies (empty)
• Zero localStorage: no data persists on your browser
• Zero third-party: all assets served from same domain
• RSS feed: the only “tracking” allowed is voluntary subscription