Traffic privacy
This site records limited request metadata to understand human, crawler, and AI-agent activity.
Recorded
User-Agent, requested path without its query string, HTTP method and status, resource class, Cloudflare data-center code, timestamp, and whether the request was allowed or rate-limited.
Catalog searches
Search terms sent to /api/search are processed in memory against the static public catalog to produce results. Search terms and other query-string values are not written to traffic analytics.
Client fingerprint
The client address and User-Agent are combined with a secret salt using HMAC-SHA-256. The raw client address is not stored. The resulting identifier is pseudonymous, not anonymous.
Retention and purpose
Events are stored in Cloudflare Workers Analytics Engine for up to three months and are used only to measure and protect this service. The site does not use authentication or advertising cookies.