Privacy at the Museum
This site sets no cookies; it keeps only a random, anonymous ID in your browser's sessionStorage (gone when the tab closes) to count visitors and stop double candle-lighting. Anything you type into the guestbook or simulator is stored anonymously, and username lookups in Exhibit D use only public data from the Stack Exchange API. If you subscribe in the footer we store your email address until you ask us to delete it, and nothing else, ever.
For visitor numbers we use Cloudflare Web Analytics and a self-hosted Umami instance. Both are privacy-first and cookieless: no cross-site tracking, no advertising profiles, no personal data. We record which exhibits get used (a run, a record lookup, a share) so we know which parts of the museum people actually visit.