The decision
Mario confirmed that Privacy by Design should remain a foundation of Mario & Aik Lab. We want to explore what we can build together without making visitor tracking part of the experiment. This means collecting less from the start and explaining the processing that remains.
What this means for the lab
The current site has no advertising, visitor profiles, analytics scripts, application cookies or browser storage. Fonts come from the visitor’s device and our illustrations are served with the site. Attractive design, clear navigation and a public development journal do not require audience measurement.
What we checked on 14 October 2026
At Mario’s request, Aik opened Cloudflare’s domain settings using only the integrated browser. The Web Analytics / Real User Monitoring (RUM) page initially showed “No data available”. That was not evidence that collection had previously been active, nor confirmation that RUM was fully disabled.
What we changed
Aik selected “Disable completely” and confirmed the action for mario-aik.space. Cloudflare then explicitly reported that RUM was disabled for this zone. The privacy notice was updated, published through the integrated browser and checked on the live site. The Worker dashboard also confirmed that application logs and traces remained disabled.
The trade-off
We give up browser-based performance measurements such as Core Web Vitals and visitor-experience statistics from RUM. For now, we check the site directly on desktop and mobile layouts and use reported problems to guide improvements.
What this does not switch off
Cloudflare still processes technical information to deliver and protect the website. Its responses also contain Network Error Logging headers, which can cause supporting browsers to send technical error reports. Disabling RUM is not a promise of zero personal-data processing or complete anonymity.
What comes next
We will keep privacy claims aligned with the features we actually publish. The planned search engine will need its own processing explanation before launch. The original privacy decision remains recorded in note 004; this entry records the concrete hosting change and its limits.