Privacy
The list of Pals you have ticked is never part of either counter below.
What gets sent
analytics.palmeta.net only serves the counting script. The counts are written to Google Cloud Firestore. Each count includes the page address with the query string removed, the site host name, and the UTC day of the visit with no time of day. A hash on the address is kept. No clock time is sent. Like any request, they expose the visitor's IP and browser to Google.
This tab, before you answer
Either way, the counter keeps a session marker in this tab only: a sessionStorage key named a.s. plus the project key. It records that this tab already counted for the current UTC day. It stays in the tab. Closing the tab drops it. It is not a cookie, and it is not sent.
The visitor id, after you allow it
Allowing analytics stores a visitor id on this device, under a localStorage key named a.u. plus the project key. The id is random. It is never sent. It is replaced after 400 days. Stored beside it are when it was created and the last UTC day this browser was counted. Allowing it also writes a sessionStorage key named a.c. plus the project key, in this tab only. It records that this tab already counted as a consented session that UTC day. Closing the tab drops it. It is not a cookie, and it is not sent.
Turning analytics off
Turning analytics off deletes that visitor id. Switching back to a session removes the id and the a.c. marker, and leaves the tab's a.s. session marker. Turning it off also deletes Google's analytics cookies.
Google Analytics
Google Analytics makes no request until you allow it, and stops as soon as you turn it off. After you allow it, Google Analytics receives the full page address, including the query string, and the page title. It sets the _ga and _ga_<id> cookies on this device. Advertising and cross-device signals stay off.
The Pals you have ticked
The first tick creates an anonymous Firebase account and keeps you signed in on this device. The ticked list is stored in palmeta's Firebase (Google Cloud) project, palmeta-prod, so it can sync between devices. Linking a Google account is optional. Linking one stores its email, name, and photo in Firebase Auth. Signing out stops syncing. Signing out does not delete the copy stored in palmeta-prod, and the site has no delete option yet.