Privacy
Yelirverse privacy
Visit measurement
We use Google Analytics only to count visits and see which pages people use. No ads, no sponsors and no selling data. To count a visit, your browser loads Google's script from www.googletagmanager.com, and that script reports the visit to Google at www.google-analytics.com. Google sees your IP address and browser details. Google Analytics sets cookies in your browser to tell one browser from another. To turn counting off for a browser, open yelir.net/?notrack in it once: that sets one cookie named notrack, asked to last ten years (some browsers keep it for less), and while it is there Google's script is not loaded on yelir.net or its pages. Opening yelir.net/?track removes it. The privacy page, the alerts pages and the IP page do not load the script.
Discord card
The Discord card on the home page is filled in by your browser, not by this server. To do that, your browser connects to Lanyard (api.lanyard.rest), a third-party service that relays Discord status, and loads album, game and emoji pictures from Spotify's image server (i.scdn.co), Discord's image servers (cdn.discordapp.com and media.discordapp.net) and one third-party icon host (dcdn.dstn.to). Those services see your IP address and browser details, as with any site a browser contacts. The song play counts on the card come from this site.
Bluesky and Letterboxd cards
On the home page, the words on the Bluesky and Letterboxd cards come from this site. The pictures do not: your browser loads post pictures from Bluesky's image servers (cdn.bsky.app and video.bsky.app) and film posters from Letterboxd's image server (a.ltrbxd.com). Those services see your IP address and browser details, as with any site a browser contacts.
IP page
To show your other kind of address, IPv4 or IPv6, the IP page has your browser ask ipify (api.ipify.org or api6.ipify.org). When you use a lookup tool there, your browser sends the name or address you typed straight to Cloudflare's DNS service (cloudflare-dns.com), the RDAP lookup service (rdap.org) or Cert Spotter (api.certspotter.com), and not to this site. For a Whois lookup, rdap.org keeps no records itself: it sends your browser on to the registry that does, such as the company that runs the ending of the name or the regional body that hands out IP addresses, and your browser repeats the lookup there. There are hundreds of these registries, so they are not named here. All of these services see your IP address and browser details, as with any site a browser contacts.
Discord alerts
If you set up Discord alerts, we store the encrypted webhook URL, selected topics, quiet-hour settings, timestamps and delivery counters in SQLite under db. Confirm tokens are stored only as keyed hashes. The manage token is stored as a keyed hash and in encrypted form, so every alert message can carry the same working link. IP addresses are used only for in-memory abuse limits and are not stored. Use the private manage link to edit, pause, test or delete the alert. Alerts expire after six months unless renewed. Expired alerts are deleted 30 days later, and sign-ups that are never confirmed are deleted after 7 days.