From 7d3504df32a5e940b72d9b9e02989db744545536 Mon Sep 17 00:00:00 2001
From: bits-bytes-nn <aldente0630@gmail.com>
Date: Fri, 30 Oct 2026 23:47:23 +0900
Subject: [PATCH] Add a privacy notice; turn off GA's Google signals and ad
 personalisation

GA set its cookies with no notice anywhere on the site. About now says what a
reader's browser shares (GA, fonts and libraries, Semantic Scholar, hotlinked
figures, local storage) and how to opt out, linked from every footer. The site
shows no ads, so GA no longer collects Google signals or ad-personalisation
data.
---
 _includes/footer.html |  2 +-
 _includes/head.html   |  9 +++++++--
 about.md              | 19 +++++++++++++++++++
 3 files changed, 27 insertions(+), 3 deletions(-)

diff --git a/_includes/footer.html b/_includes/footer.html
index 6e1318b..c815267 100644
--- a/_includes/footer.html
+++ b/_includes/footer.html
@@ -41,7 +41,7 @@ <h2 class="footer-heading">{{ site.title }}</h2>
     </div>
 
     <div class="site-signature">
-      <p class="rss-subscribe text"><strong>Subscribe <a href="{{ "/feed.xml" | prepend: site.baseurl }}">via RSS</a></strong></p>
+      <p class="rss-subscribe text"><strong>Subscribe <a href="{{ "/feed.xml" | prepend: site.baseurl }}">via RSS</a></strong> · <a href="{{ '/about/#privacy' | prepend: site.baseurl }}">Privacy</a></p>
       <p class="text" lang="{{ site.lang }}">{{ site.description }}</p>
     </div>
 
diff --git a/_includes/head.html b/_includes/head.html
index 3dbfc97..7761f2e 100644
--- a/_includes/head.html
+++ b/_includes/head.html
@@ -305,14 +305,19 @@
 		crossorigin="anonymous"></script>
 	{% endif %}
 
-	<!-- Google Analytics, on the deployed build only: a local serve would count as traffic. -->
+	<!-- Google Analytics, on the deployed build only: a local serve would count as traffic.
+	     Google signals and ad personalisation are off: this site shows no ads and
+	     needs page counts, not cross-site profiles (see About, "Privacy"). -->
 	{% if site.ga_tracking_id and jekyll.environment == 'production' %}
 	<script async src="https://www.googletagmanager.com/gtag/js?id={{ site.ga_tracking_id }}"></script>
 	<script>
 		window.dataLayer = window.dataLayer || [];
 		function gtag(){dataLayer.push(arguments);}
 		gtag('js', new Date());
-		gtag('config', '{{ site.ga_tracking_id }}');
+		gtag('config', '{{ site.ga_tracking_id }}', {
+			allow_google_signals: false,
+			allow_ad_personalization_signals: false
+		});
 	</script>
 	{% endif %}
 
diff --git a/about.md b/about.md
index de48edc..cb1c81d 100644
--- a/about.md
+++ b/about.md
@@ -27,3 +27,22 @@ If something here sparks a thought, I'd love to hear it — reach out through an
 - **GitHub** — [bits-bytes-nn](https://github.com/bits-bytes-nn)
 - **LinkedIn** — [Jonas Kim](https://www.linkedin.com/in/aldente0630)
 - **Threads** — [@aldente0630](https://www.threads.com/@aldente0630)
+
+## Privacy
+
+This blog has no accounts, comments or ads, and keeps no data of its own. What
+your browser shares while you read:
+
+- **Google Analytics** counts page views: the page address, the referring page,
+  your device and browser type and an approximate location. It sets first-party
+  cookies (`_ga`, `_ga_*`) that last up to two years. Google signals and ad
+  personalisation are turned off. To opt out, block those cookies or use
+  [Google's opt-out add-on](https://tools.google.com/dlpage/gaoptout).
+- **Fonts and libraries** load from Google Fonts, jsDelivr and unpkg, which see
+  your IP address as part of serving them.
+- **Paper reviews** ask Semantic Scholar for the paper's citation count, and
+  some posts show figures hosted by their original sites (arXiv and others).
+- **Your browser** keeps your theme choice and cached citation counts in local
+  storage; nothing leaves your device for those.
+
+Questions or requests: [{{ site.email }}](mailto:{{ site.email }}).