Cookie notice

The complete answer is that this website sets no cookies of its own, and that a strictly necessary security cookie may be set by the company that hosts it. Nothing else is written to your device by any code on any page here.

There is no analytics product, no advertising, no tracking pixel, no session recorder, no heat map, no tag manager and no attempt to recognise you when you come back. There is no consent banner, because a banner exists to collect permission for storage that is not strictly necessary and there is none of that here.

One further thing reaches beyond the page without storing anything on your device. Two typefaces are requested from Google's font servers, which discloses your IP address to a third party. That request stores nothing, but leaving it out of a page called a cookie notice would be a technicality used as an excuse, so it has a section of its own below.

Everything that may be written to your device by this website, in one table. There is no second table elsewhere and there is nothing under a different heading.

Neither of the two cookies is readable by us as an identifier of you. Neither is used for any purpose beyond keeping the site reachable. Neither is shared with anybody, joined to anything, or examined by a person.

You do not have to take that on trust. Open the Application panel of your browser's developer tools, look at the storage list for this origin, and compare it against the table. That is a check you can complete in under a minute and it is worth more than a paragraph of assurance.

Listing what is absent is more useful than listing what is present, because the absences are exactly what a short table cannot demonstrate.

• No Google Analytics, Plausible, Fathom, Matomo, Umami, Simple Analytics or any other analytics product, self hosted or otherwise.
• No advertising, no advertising cookie, no advertising identifier and no retargeting of any kind.
• No Meta pixel, no LinkedIn Insight tag, no X pixel, no TikTok pixel, no Reddit pixel and no conversion tracking.
• No session recording, no heat mapping, no scroll depth tracking and no rage click detection.
• No embedded video, no embedded map, no social widget, no comment system, no chat bubble and no newsletter modal.
• No local storage, no session storage, no IndexedDB and no cache API entry written by our code.
• No canvas fingerprinting, no font enumeration and no other attempt to identify a device by its characteristics.
• No A/B testing framework, no feature flag service and no personalisation engine.
• No third party JavaScript at all. The single script this site loads is served from this domain, is under two hundred lines, and does a navigation toggle and a scroll reveal.

Open the Network panel alongside the Application panel and you will find exactly what is described on this page. That verification, rather than the promise, is the point of writing it out.

Australia has no separate cookie consent regime. There is no local equivalent of the European ePrivacy Directive, no statutory requirement to obtain permission before writing a cookie, and no requirement to display a banner. A banner on an Australian website is a design decision, or a habit imported from somewhere else, rather than compliance with anything Australian.

What does apply is the Privacy Act 1988 (Cth). Where a cookie or a similar technology collects information about an individual who is reasonably identifiable, that information is personal information and the Australian Privacy Principles apply to it in the ordinary way. APP 3 governs whether it may be collected at all, APP 5 governs telling you about it, APP 6 governs what may then be done with it, and APP 11 governs keeping it secure and destroying it when it is no longer needed.

So the questions worth answering are whether you were told, whether the thing is genuinely needed, and whether it is used only for the purpose that was stated. This page answers all three in order. A banner would answer none of them.

If you are reading from the European Economic Area or the United Kingdom, a stricter regime applies to you than applies to us. It makes no practical difference here, because the only storage described above is strictly necessary and would be exempt from a consent requirement under those regimes as well.

Refusing to add a banner is a decision rather than an oversight, so it is worth defending in the open.

A consent banner asks permission for storage that is not strictly necessary. There is none of that here, so a banner on this site would be asking you to agree to nothing at all. That is worse than leaving it out for two reasons. It teaches people to dismiss a control that genuinely matters on other sites, one reflex click at a time. And it implies that this site is doing something it is not, which is a strange thing to imply about yourself.

If analytics or advertising is ever added here, three things will happen in this order. This page will be updated first. Consent will be asked for before the thing loads rather than while it is already running. Refusing will be exactly as easy as accepting, and refusing will not degrade anything on the site.

Two typefaces load from Google Fonts, from fonts.googleapis.com and fonts.gstatic.com. That is the only request this website makes to a host we do not control, and it is worth being exact about what it discloses.

Making the request tells Google's servers your IP address, your user agent string and the page that referred you. Google states that the Fonts service sets no cookies and that requests to it are not used for advertising or for profiling. We have no way to verify that from here, which is why this sentence names who is making the claim rather than presenting it as something we established.

Self hosting the two font files would remove the request entirely, and it is on the list of things to do. Until it is done, this paragraph is the honest description rather than an omission. Blocking those two hosts in your browser leaves the site working perfectly well in a system font, because the stylesheet names fallbacks for both faces.

Every web server records the requests it receives. A page about what visiting this site involves would be telling half the story if it stopped at device storage.

The company that hosts this site records the IP address a request came from, the time, the path requested, the user agent string, the referring page, the response code and the number of bytes served. None of that is stored on your device, so none of it is a cookie. It is still personal information under Australian law, and it belongs in an honest account of what reading this site involves.

Those logs sit with the hosting provider on the provider's own retention cycle, currently under 30 days. They exist for delivering pages and for absorbing automated abuse, and for nothing else. They are not exported to us, not joined to anything, and not searchable by identity. The same information appears in the collection table in the privacy policy, where its retention and its lawful basis are set out alongside everything else.

Every major browser lets you block cookies, delete the ones already stored, and inspect exactly what a site has written. Blocking the two cookies described above may mean the hosting provider challenges you more often, and it will not stop this site working.

• Chrome: Settings, then Privacy and security, then Third party cookies. Use Site data for what is already stored.
• Safari: Settings, then Privacy, then Manage Website Data.
• Firefox: Settings, then Privacy and Security, then Cookies and Site Data.
• Edge: Settings, then Cookies and site permissions.

Private or incognito browsing discards everything at the end of the session, which changes almost nothing here, because nothing on this site persists between visits in the first place.

A content blocker that blocks the Google Fonts hosts will also work as intended, and the pages will render in whatever sans serif and monospace faces your system provides.

Do Not Track and Global Privacy Control are both honoured on this site. That is an easy commitment to make, because there is nothing here for either signal to switch off. When one is present, no additional storage occurs and no additional processing happens, which is also exactly what happens when neither is.

We say so anyway. A site that ignores those signals and stays quiet about it has made a decision it would rather you did not examine, and the honest version of that sentence is worth more than the technically identical outcome.

Cookies are a browser mechanism. The measurement tooling described elsewhere on this site has no browser, no session and no page, so there is nothing in it that could set one.

What such a tool would and would not send is described in the collection tables in the privacy policy. The short version is that the design joins on document and question identifiers rather than on text, and that document contents, question text, embedding vectors and credentials are all outside the boundary by construction rather than by promise.

Nothing has shipped, so nothing in this section is currently in operation. It is here because a cookie notice that quietly ignored the product would be answering an easier question than the one a reader is asking.

Anything that stores information on your device beyond what appears in the table above gets added to that table, with a new effective date, before it goes live rather than afterwards. Where the law that applies to you requires consent for it, consent will be asked for first, and refusing will not degrade anything on this site.

Previous versions of this notice are kept and are available on request. If you want to know what this page said on a particular date, ask rather than relying on a paraphrase.

Email contact@arcusai.fyi. A question about this page is answered within 5 business days. A request under the Privacy Act 1988 (Cth) for access to or correction of personal information is answered within 30 days.

If our answer does not satisfy you, complain to the Office of the Australian Information Commissioner (OAIC), GPO Box 5218, Sydney NSW 2001, telephone 1300 363 992, oaic.gov.au. There is no fee, you do not need a lawyer, and you do not need our agreement.