What I collect, which is very little

I am Carl Brothers. I live in Washington state in the United States, and CYGM is my hobby project. One person, no employees, no investors, no company. I hold whatever this site records, and I am the only one who reads it.

Email me at decibelkaos@gmail.com about anything on this page, including asking me to delete something.

A running device checks in with this site every so often. That check-in carries a random device identifier the device made up for itself, and nothing that names you. If you have set a city for the weather, it sends that city name and the coordinates it geocoded for it, rounded to two decimal places, which is roughly a kilometre. A device on older firmware, or one with no city set, gets a single lookup of the public network address the check-in arrived from, done through a third party service called ipwho.is, and the answer is remembered against that identifier so the lookup is not repeated.

Identifiers and coordinates stay on the server. The map anyone can open from the top of this site is served as city buckets and a count, never as individual devices. A device counts as online for thirty minutes after it last checked in, and its entry is deleted outright once that half hour has passed with no further contact. There is no history kept: the file holds only what is currently online.

The device is the thing that speaks to this site, not you. I cannot connect an identifier to a person, because I have never been given a name or an address to connect it to.

There is one, and it is not for you. Logging in to the password-protected area I use to review story submissions sets a session cookie. If you have not typed that password, you have never been sent a cookie by this site. There are no tracking cookies, no advertising cookies, and no third party cookies.

Sending a story is the one place on this site where you hand me anything about yourself, and it is entirely voluntary. What is stored is what you typed: your name and how you chose to be credited, your email address, the place and the service you picked if you filled those in, your title, your words, any photographs, any link and what you called it, the date, and a copy of the exact consent wording that was on screen when you agreed to it, with the time you agreed. Your email address is never published. I do not store your network address or your browser string with a submission.

Photographs are decoded and written out again as fresh files the moment they arrive, which is what removes the location and capture time your phone hides inside a camera file. Nothing is emailed anywhere. A submission sits in a directory that is not reachable from the web until I have read it, and publishing one is a deliberate act by me.

Ask me and your story comes down. Because health information is involved, the consumer health data notice covers the same flow in the shape Washington law asks for, and it is worth reading if you plan to send one.

This site is not directed at children under thirteen, and I do not knowingly collect anything from them. Story submissions are for adults: you have to be eighteen or older to send one.

Plenty of the people reading this are parents of a child with type 1 diabetes, and a parent is welcome to write about their own child, without naming the child and without details that would identify them. If you believe a child has sent me something anyway, email me and I will delete it.

Email decibelkaos@gmail.com and ask me to tell you what I hold about you, to correct it, or to delete it. I will answer within fourteen days, and in practice usually the same day, because it is one person and a very small pile of files.

You do not need an account to make a request, because there are no accounts. If you sent a story, mention the name or the email address you used so I can find the right file. I will not ask you for anything more than is needed to work out which file you mean.

Your own device is yours. Your CGM credentials are stored on it, never here, and wiping the device removes them. There is no copy on my side for me to delete.

I am one person in Washington state, and the California thresholds that would make that state's consumer privacy law apply to me are not met: this is not a business, there is no revenue, and nothing is sold or shared for anything of value. I am telling you what I do anyway, on this page, because that is the useful part.

This project is run from Washington state and it is aimed at people in the United States. I do not target the European Union or the United Kingdom, I do not advertise anywhere, and this site takes no payment in any currency. Anything stored is stored on servers in the United States.

None of that is a reason for me to be difficult. Wherever you are, if you want me to delete something I hold about you, email me and I will delete it.

The whole site is served over HTTPS. Unpublished story submissions and their consent records sit in directories the web server refuses to serve. The review area is behind a password. There is no database and no customer list, which is the strongest thing I can say here: the smaller the pile, the less there is to lose.

I will not tell you it cannot be broken into. Nobody honest can promise that about a website. What I can tell you is what is in the pile, which is on this page, and that I will say so plainly here if something goes wrong.

If what the device sends or what the site stores changes, I will change this page and move the date at the top. There is no mailing list to announce it on, so the date is the honest signal.

Alongside this there is the consumer health data notice for stories, and the terms and disclaimers covering what this project is and what it is not.

Effective 10 September 2026.