Privacy & cookies
In short: no accounts, no tracking, no ads and no analytics cookies. This page explains what still happens technically when you visit n3onlab.xyz.
Who is responsible
Nenad Musa, Mostar, Bosnia and Herzegovina — contact: nmusa@n3onlab.xyz. Personal data is processed in line with the Personal Data Protection Act of Bosnia and Herzegovina and, for visitors from the EU, the General Data Protection Regulation (GDPR).
Where the site runs
- Website — Cloudflare Workers. n3onlab.xyz is a static site (HTML, CSS, JavaScript, images, PDF, .md and ZIP files) served by Cloudflare, Inc. There is no server, database or user account of ours behind it.
- DNS and network — Cloudflare. The domain uses Cloudflare DNS and Cloudflare's network (HTTPS, caching, DDoS and bot protection).
- Files — Cloudflare R2. Larger downloads (PDFs, videos, scripts, prompt files, archives) are stored in Cloudflare R2 object storage and served from
files.n3onlab.xyz. - Source code. The site's files are kept in a git repository; visitors never connect to the repository service unless they open a link to it.
What happens when you visit
- Technical connection data. To deliver and protect every page and file, Cloudflare processes your IP address, the time, the requested address and browser details (user agent). This is necessary to run a website (legitimate interest, Art. 6(1)(f) GDPR). We do not get access logs and build no visitor profiles.
- No accounts, comments, newsletter or forms. If you e-mail us, your address and message are used only to answer and are deleted when they are no longer needed.
- No analytics, no advertising, no tracking pixels.
- Nothing from other companies loads by itself. No external fonts, scripts, images or embeds are requested when a page opens.
Downloads
Article PDFs, Obsidian notes (.md) and vault ZIPs come directly from n3onlab.xyz; other files come from files.n3onlab.xyz (Cloudflare R2). A download is a normal request: Cloudflare processes the connection data above to deliver the file. Downloads are not counted per person, no login is needed and the files set no cookies. Read scripts before you run them — see License & publishing.
YouTube videos
We mostly link to YouTube videos: nothing is sent to YouTube until you click such a link, and after the click YouTube's own rules apply. Where a video player is shown on a page, it stays a placeholder and loads from youtube-nocookie.com only after you click it or allow external media — before that not even the thumbnail is requested. Google Ireland Ltd. then processes data under its privacy policy; transfers to the USA may occur (EU-US Data Privacy Framework).
Links to other sites
We link to useful articles, projects and resources. Nothing from those sites loads in advance. When you open a link, your browser connects to that site, so it receives your IP address and its own privacy and cookie rules apply. Our pages send only our domain name as referrer (strict-origin-when-cross-origin), not the page you came from.
Cookies & local storage
This site sets no cookies itself. Cloudflare may set strictly necessary security cookies (listed below); they need no consent. A few small settings are kept in your browser's local storage only because you used the function; they never leave your device.
| Name | Provider | Purpose | Duration | Type | When |
|---|---|---|---|---|---|
__cf_bm | Cloudflare, Inc. | Bot protection (strictly necessary, security) | 30 minutes | Necessary | Only when Cloudflare deems it necessary |
cf_clearance | Cloudflare, Inc. | Remembers a passed security challenge (necessary) | per setting (default 30 min) | Necessary | Only after a security challenge |
n3on-consent (localStorage) | This website | Stores your cookie choice (external media, statistics) | until you clear it | Necessary | When you choose in the notice |
n3on-mode (localStorage) | This website | Remembers your light or dark theme choice | until you clear it | Necessary (a function you asked for) | When you click ☀ / ☾ |
n3on-below (localStorage) | This website | Remembers which tab under an article you opened last | until you clear it | Necessary (a function you asked for) | When you click a tab |
n3on-vault-graph (localStorage) | This website | Remembers the graph view settings in /vault/ | until you clear it | Necessary (a function you asked for) | When you change the graph view |
— (downloads from files.n3onlab.xyz) | Cloudflare, Inc. (R2) | File delivery; the file itself sets no cookies (only the Cloudflare security cookies above may apply) | — | Necessary | When you click a download |
YSC, VISITOR_INFO1_LIVE, … | Google Ireland Ltd. (YouTube) | Video playback, YouTube statistics and preferences | session up to 6 months | Third-party — only with consent | Only once you load a video |
You can change or withdraw your choice at any time: . Clearing your browser data removes everything listed here.
Search engines
We use Google Search Console and Bing Webmaster Tools to see how n3onlab.xyz appears in search results and to submit the sitemap. Ownership is confirmed with a DNS record at Cloudflare, so these services add no code, cookies or tracking to the site. They only show us aggregated search data (queries, clicks, pages) collected by the search engines themselves — never data about individual visitors of this site.
Service providers and transfers
Cloudflare, Inc. (USA) — website hosting (Pages), DNS, network security and file storage (R2): cloudflare.com/privacypolicy. Cloudflare acts as processor under its Data Processing Addendum, is certified under the EU-US Data Privacy Framework and uses the EU Standard Contractual Clauses.
Your rights
You can ask for access, rectification, erasure, restriction, objection and data portability — write to nmusa@n3onlab.xyz. You can lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (AZLP) — azlp.ba; visitors from the EU may also contact the authority of their own country.
Changes
We update this page when the setup changes (for example a new service). Last change: .