Poncho → What this site collects
What this site collects
Nothing. No cookies, no local storage, no tracking pixel, no third-party fonts. You do not have to take our word for it — open your browser's network tab and reload this page, and you will see every request it makes. There are about a dozen and they all point at this domain.
Why there is no cookie banner
Consent is required for storing something on your device or reading something back off it. This site does neither, so there is nothing to ask about. That is a design decision rather than an oversight, and it cost something: the typeface is subset and served from this domain instead of loaded from Google, the film is self-hosted, and there is no analytics library, no embedded player and no chat widget. Every one of those would have brought the banner back.
- No cookies. None at all, first- or third-party.
- No local storage, session storage or IndexedDB. Nothing is written to your device and nothing is read from it.
- No third-party requests. The fonts, the film and every image come from this domain.
- No profile. There is no account here, nothing to attach anything to, and no attempt to work out who you are.
What the server sees anyway
The site is static files served by Cloudflare. Delivering a page means Cloudflare receives what every web server receives: your IP address, the address you asked for, your browser's user-agent string and language preference, and the time. Those sit in Cloudflare's logs, are used to serve the page and to keep the site standing, and age out on Cloudflare's own schedule. There is no way to publish a website without this happening, and anything telling you otherwise is describing a site that does not exist.
Counting visits
Nothing counts them today. There is no analytics on this site at the moment — no counter, no beacon, no script from anywhere but this domain, which is what lets the paragraph at the top of this page say every request points here.
That will probably change, and when it does it will be Cloudflare Web Analytics: no cookie, no state
kept on your device, counting from the referrer header your browser already sends. What it produces is
aggregate — how many views, which pages, which country, which referrer, how fast the page loaded — with
no individual profile and no tracking across other sites. It does load one script from
static.cloudflareinsights.com, so on the day it is switched on, this section says so and
the sentence about every request pointing at this domain stops being true. We would rather rewrite that
sentence than quietly break it.
Links that leave
The links to Telegram and X go to services we do not run. Once you follow one you are on their terms and their privacy policy, and we are not told that you clicked.
One of them carries something you wrote. The feedback box composes your note into a Telegram share link; nothing is sent while you type, and nothing is stored here. When you press the button, your browser opens Telegram with that text in the address — so the text goes to Telegram, at that moment, because you asked it to. There is no inbox on our side at all: the panel says so itself.
The bot is a different question
Everything above describes this website. The Poncho bot is not open yet, and when it is it will necessarily handle more than a website does — Telegram passes a bot the messages you send it, and signing a transaction means something has to be stored. That is written up separately and goes up before the bot does, not after. What can be said now is on the page about what can go wrong, which covers the key handling in more detail than most people want.