Privacy

Policy date: 25 October 2026.

Summary

Agentonomy is a static website. The site sets no cookies. It has no forms, no accounts, no comments, no tracking pixels and no advertising. Cloudflare hosts the site, so it receives technical data about each request, including your Internet Protocol (IP) address. Cloudflare Web Analytics counts visits and measures how fast pages load.

Who is responsible

The controller for this website is the operator of agentonomy.dev, who publishes it as Agentonomy. A contact address for questions and requests about your data will be published on this page before the public launch on 12 January 2027.

What is processed, and why

Hosting

The site is a set of static files served by Cloudflare Workers, Cloudflare’s hosting platform. When you request a page, your browser sends Cloudflare data about that request. Cloudflare’s privacy policy says this may include IP addresses and traffic routing data ¹. We use Cloudflare to deliver the site and keep it secure. We do not use this data to identify visitors.

Visit counts and page speed

Cloudflare Web Analytics is switched on. It is built into the site’s own pages; Cloudflare does not inject it. Each page loads a small script from static.cloudflareinsights.com ². The script sends a report on the page view to cloudflareinsights.com ³. It collects metrics through the browser’s Performance API, mainly timings of how the page loaded ^4,2.

From these reports, Cloudflare shows us aggregate figures: visits, page views, page load time and Core Web Vitals ⁵. Core Web Vitals are measures of page experience designed by Google ⁵. We can break the figures down by country, referring site, device type, browser and operating system ⁶.

What Cloudflare says about the script:

It uses no cookies or local storage to collect its metrics vendor claim ⁷.
It does not fingerprint individuals for analytics vendor claim ⁷, and Cloudflare does not track individual visitors across its customers’ sites vendor claim ².
“Currently”, it does not log query strings, although Cloudflare may add support for them in future vendor claim ³.
It “does not collect or use your visitors’ personal data” vendor claim ⁴.

Your browser still connects to Cloudflare to fetch the script and send the report, so Cloudflare receives your IP address with those requests my analysis.

Lawful basis

We rely on legitimate interests, under Article 6(1)(f) of the UK General Data Protection Regulation (UK GDPR) ⁸. Our interests are to deliver the site, keep it secure, and learn which pages are read and how fast they load. The data is technical, we do not use it to identify anyone, and no cookies are set. You can object to this processing at any time (see “Your rights”).

Cookies

The site sets no cookies. Some Cloudflare security features, such as Bot Fight Mode, place cookies on visitors’ devices ⁹. We keep those features switched off for this site.

Who receives the data

Cloudflare, Inc. is the only other organisation involved. Under its privacy policy it acts in two roles ¹:

As our processor. This covers the content it serves, and the visitor data it shows us in its dashboard, which its policy calls “Customer Logs” ¹. We understand the Web Analytics figures to fall under this role my analysis.
As a controller in its own right. This covers other visitor data it processes for its own purposes, such as operating, improving and securing its services ¹.

Cloudflare’s privacy policy explains its own processing.

Transfers outside the UK

Cloudflare is a United States company and primarily stores information in the United States and the European Economic Area ¹. For transfers from the UK to the United States, its policy says it relies on its certification under the UK Extension to the EU-U.S. Data Privacy Framework vendor claim ¹. If that certification lapses or becomes invalid, it relies on standard contractual clauses vendor claim ¹.

How long data is kept

Web Analytics. Cloudflare says it keeps the unsampled data for 7 days vendor claim ³. It then aggregates it to around 10% of its original volume for long-term storage vendor claim ³. Its dashboard shows us the previous six months of figures vendor claim ³. Cloudflare’s documentation gives no end date for the aggregated data unknown ³.
Hosting data. Cloudflare says it keeps request data for as long as its business purposes or legal obligations require vendor claim ¹. Its policy gives criteria, not fixed periods ¹.

Your rights

You can ask us for access to your personal data, and to have it corrected or erased ¹⁰. You can also ask us to restrict its use, object to it, or receive it in a portable form ¹⁰. Because we rely on legitimate interests, you can object at any time.

Write to the address under “Who is responsible” once it is published. We hold no names, email addresses or accounts. We may therefore be unable to link a request to any data; if so, we will tell you. Cloudflare says it directs visitors’ rights requests to the website they used, so please write to us first ¹.

Complaints

If you are unhappy with how your data is handled, you can complain to us first, at the address above once it is published ¹⁰. You also have the right to complain to the UK data protection regulator, the ICO. The ICO recommends raising a concern with the organisation first, and then complaining to it if you are unhappy with the response ¹¹. Its complaints service is at ico.org.uk/make-a-complaint.

The RSS (Really Simple Syndication) feed at /feed.xml contains no tracking. A newsletter is planned, but no provider has been chosen. Before any sign-up form appears, this page will name the provider and say what data it holds and why.

Links to other websites

Links to other websites take you off Agentonomy. Those sites have their own privacy policies, and this policy does not cover them.

Changes to this policy

If this policy changes, the date at the top changes too, and a short note here will say what changed.