Necessary technology
- Administrator authentication: Supabase session cookies are used after an authorised administrator signs in. They are necessary for the private dashboard and are not used for advertising.
- Security: Cloudflare Turnstile and hosting infrastructure process technical signals to distinguish legitimate submissions from automated abuse. The current implementation does not use Turnstile pre-clearance.
- Rate limiting: the server creates a one-way hash from request information to enforce short security limits. It is stored in the database, not in your browser.
Third-party media
YouTube, Vimeo, Spotify, SoundCloud, and similar embeds are not loaded automatically. The page first shows a notice and a load button. If you choose to load the content, the provider may receive your IP address and browser information and may set cookies or local storage under its own policy.
Analytics and advertising
The public site does not currently install analytics, behavioural advertising, or cross-site tracking cookies. If optional analytics or marketing technology is introduced later, it must not run before any consent required by applicable law, and this notice must be updated.
Browser controls
You can delete or block cookies through your browser settings. Blocking the administrator authentication cookie will prevent dashboard sign-in. Blocking third-party content will not prevent you from reading the surrounding Overspill page.
More information
See the privacy notice for the related data uses and service providers.