Privacy

This is a personal site run by me, Robin Taylor, in the UK. I'm the person responsible for any personal data it handles. Questions or requests go to hello@michi.sh.

The short version: I keep as little as I can, and nothing is sold or shared for advertising.

Reading the site

The site is static pages hosted on GitHub Pages. Like any web host, GitHub sees your IP address to deliver the pages; that's handled under GitHub's own privacy statement, and I don't receive it. Fonts and images are served from the site itself, so reading it doesn't contact anyone else.

Analytics and cookies

With your consent, the site uses Google Analytics (through Google Tag Manager) to count visits and see which pages are read. Consent is managed by the CookieYes banner, which stores one cookie (cookieyes-consent) to remember your choice.

Until you accept, analytics cookies are not set. Google may still receive basic signals that a page was visited (Google's "Consent Mode"); these don't use cookies or anything stored on your device. You can change your choice at any time using the banner's settings button. The lawful basis for analytics is your consent.

The garden

The garden is an optional 3D space. Nothing here applies unless you choose to enter it.

  • Being there. While you're in the garden, the server knows where your ghost is standing so other visitors can see it, under a random label that changes every visit. You have no name or account. None of this is stored; it disappears the moment you leave.
  • Bot check. Before you connect, Cloudflare Turnstile checks you're not an automated script. It runs in your browser and sends Cloudflare technical signals, including your IP address. I don't receive or keep those. This is only loaded in the garden.
  • Infrastructure. The garden's server runs on Cloudflare, which processes your IP address to deliver the connection. I don't store it.
  • No cookies are set for visitors in the garden. (A sign-in cookie exists only for me, to prove it's really me.)

The lawful basis for the above is legitimate interests: making the garden work and keeping it free of bots.

Talking to me in the garden

If I'm in the garden, adults can ask to talk to me. Visitors can only ever talk to me, never to each other. Before you can ask, you confirm you're 18 or over.

Conversations are recorded. They disappear from your screen when you leave, but a private copy is kept so there's a reliable record if anything said is ever questioned. That protects you as much as me, and it's the responsible thing to do when strangers can talk one-to-one.

  • What's kept: the message text, when it was sent, who sent it (you or me), the random label for your visit, and when you confirmed you were an adult.
  • What isn't: your IP address, device, browser, location or name. Please don't share personal details in a conversation.
  • Where: a private database on Cloudflare (encrypted at rest). It has no web address and can't be read from the internet; only I can open it, with my own account.
  • How long: 12 months, then deleted automatically.
  • Lawful basis: legitimate interests, specifically safeguarding and being able to show what was actually said.

Your rights

You can ask for a copy of what I hold about you, ask me to correct or delete it, or object to how it's used. For a garden conversation, tell me roughly when it was and something you said, since I have no other way to know which one was yours. Email hello@michi.sh; I'll reply within a month.

If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office.

Last updated 9 October 2026.