Privacy Policy
Last updated: 2026-07-29
Who we are
This site is https://ghostsinthelab.org, a personal weblog written by Hui-Hong You.
It is a static site: the pages are generated ahead of time with Jekyll and served as plain files by nginx from a server I operate. There is no database, no server-side application, no user accounts, and no way to register or log in.
What we collect
Server logs
The web server records each request for a page in its access log. A log entry contains your IP address, the date and time, the URL requested, the HTTP status code and response size, the referring page if your browser sends one, and your browser's user agent string. Requests for images, icons and fonts are not logged. The error log may record the same details when a request fails.
These logs exist so I can keep the site running: diagnosing broken links and server errors, and investigating abuse such as scraping or intrusion attempts. They are not used to build a profile of you, and they are not shared with anyone. They are rotated and deleted on the server's normal log rotation schedule.
Cookies and local storage
This site sets no cookies of its own and stores nothing in your browser's local storage. It ships no tracking scripts. Third-party content embedded in older posts may set its own cookies — see below.
Analytics
There is no web analytics on this site. No Google Analytics, no tracking pixels, no third-party measurement of any kind.
Comments
Comments are closed. There is no comment form anywhere on this site, and no way to submit one.
Some older posts display comments that readers left when this site ran on WordPress. Those are archived and read-only. Each shows the display name the commenter entered, the website address they gave if they gave one, the date, and the text of the comment. Commenters' email addresses were deliberately left out when the archive was converted, and are neither published nor held in the site's source. IP addresses were not carried over either.
If you left a comment in the past and would like it removed or your name changed, write to me and I will do it.
Embedded content from other websites
Some posts — mostly older ones — embed content hosted elsewhere: YouTube videos, a Twitter widget, and images hotlinked from services such as Flickr, Google's image hosting, and ImageShack.
When you open one of those pages, your browser fetches that content directly from the third party. This behaves exactly as if you had visited that site: the provider receives your IP address, your user agent string and the address of the page you came from, and may set its own cookies or track you if you have an account with them and are signed in. What those providers do with that data is governed by their privacy policies, not by this one.
Feed
An RSS/Atom feed is published at /feed.xml. Fetching it is an ordinary web request and is logged the same way as any other.
What we do not do
- No advertising and no ad networks.
- No mailing list, newsletter, or contact form.
- No selling, renting, or sharing of visitor data.
- No profiling, fingerprinting, or cross-site tracking.
Your rights
You can ask what personal data I hold about you, ask for a copy of it, and ask me to erase it. In practice there is very little to hold: recent server log entries, and any archived comment you left under your own name. This does not extend to data I am obliged to keep for legal or security reasons.
Contact
Hui-Hong You
hiroshi@ghostsinthelab.org
If you would prefer to write to me encrypted, my OpenPGP public key is at /public-0x9F353471AF05D276.asc.