Add privacy info and statistics tracking

content/privacy.md

@@ -4,21 +4,37 @@ path = "privacy"
 +++
 
 ## summary
+i want to respect your pivacy, while still getting some insight into the readership of my site. no "personally identifiable information" or "sensitive information" is collected, and no data is shared with external parties.
 
-- no javascript or other client-side tracking is performed on this site.
-- caddy server logs are enabled, but not persisted to disk.
+- goatcounter stats are collected via javascript or tracking pixel.
+- no server logs are collected.
 - the site is hosted by fly.io.
+- no data is shared.
 
 ## data that i collect
+### goatcounter statistics
+in order to have an idea about what sort of readership pages on this site are getting, i use a fly.io-hosted instance of [goatcounter](https://github.com/arp242/goatcounter/). views are tracked with javascript, or a tracking pixel if javascript is disabled. the following statistics are tracked in goatcounter:
+- sessions
+  - page visits, unique within an 8 hour window
+- referrer
+  - Referer header, campaign parameters (utm_campaign, utm_source, ref)
+- country
+- language
+  - supported languages from Accept-Language
+
+if you wish to opt out of statistics tracking on this site, you can disable javascript and images being loaded from `stats.mat.services`.
+
+goatcounter is intended to be privacy-friendly and respect your data. [take a look at the privacy policy for goatcounter here](https://www.goatcounter.com/help/privacy), although bear in mind that mat.services does not use the cloud-hosted version of goatcounter.
 
 ### server logs
+no server logs are collected.
 
-this site is served with caddy, and caddy's [default logging configuration](https://caddyserver.com/docs/caddyfile/directives/log) is used. caddy logs include information such as IP address, the document being requested, the time of request, and the response status from the server. caddy logs are not stored on disk, and are only retained for as long as the fly.io logging tooling can retrieve them.
-
-### site hosting
-
+## site hosting
 this site is hosted on fly.io. [see this page for fly.io's privacy statement](https://fly.io/legal/privacy-policy/).
 
 ## data that i share
+collected data is not shared with any third parties.
+
+## questions or comments
+reach out to mat@mat.services if you have questions about this privacy notice.
 
-logs are not shared with any third parties.

templates/partials/footer.html

@@ -13,4 +13,8 @@
   <p id="copyright">
     &copy; 2022 mat ess.
   </p>
+  <script data-goatcounter="https://stats.mat.services/count" async src="//stats.mat.services/count.js"></script>
+  <noscript>
+    <img src="https://stats.mat.services/count?p=/test-noscript">
+  </noscript>
 </footer>