Privacy

What is collected

Page URL and title, referrer, approximate location derived from your IP address (GA4 does not store the IP itself), device type, browser, language preference, and screen resolution.

What is deliberately off

Google signals, ads personalization, user-provided data collection, and User-ID are all disabled on this property. No Google Ads account is linked. Account-level data sharing with Google products and services is off. Nothing collected here is used for advertising.

Data processing and retention

Google LLC processes and stores the data. Its servers are outside Taiwan and Japan. Event data is retained for 14 months, then deleted.

Local storage

• theme: set when you toggle dark mode away from the system default. Removed when your choice matches the system again. On load, the stored value overrides the system preference; if nothing is stored, the site follows the system.
• locale: set when you explicitly pick a language from the switcher. If nothing is stored and you land on /, the site detects your browser language and redirects to the matching locale without persisting that detection.

These values never leave the browser.

What is not collected

There are no accounts, no logins, and no forms that submit data. The form controls on the demo page are non-submitting specimens; they carry no action and no handler.

The component registry

/r/*.json files are fetched by npx shadcn add running on your machine. That request is a script fetching a JSON file; it does not execute the page’s JavaScript, so GA4 does not see it.

How to decline

Any content blocker or privacy-focused browser prevents the Google Analytics tag from loading. Google also publishes an opt-out browser add-on. These are client-side measures. This site does not offer its own opt-out control.

Questions

Something this statement should cover? Open an issue at github.com/tochny/washiveil or reach me via alexchih.com.