Last updated: Nov 10, 2026.
What the pages do
Bike Field Guide publishes static pages. The worker script does not set a cookie. The HTML does not set a cookie. The browser script, /assets/site.js, does not set a cookie and does not use local storage or session storage.
There is no account and no mailing list. The only script these pages include, as published, is that file on this site. As published, the pages do not include third-party scripts, font files, or embedded frames. A host-injected analytics beacon is described below. Type is set with fonts already on your device.
The search form on the bike list writes filters into the address bar so a reload or a shared link shows the same list. That form is not submitted to a server. The sizing form keeps height and inseam on the page. It does not put them in the address bar and does not send them anywhere.
Links to a brand's page leave this site. Those sites have their own policies. The links this site publishes do not add tracking parameters.
What the host logs
The site is hosted on Cloudflare Workers. The Worker configuration turns on Workers Logs and traces and samples every request. Cloudflare's Workers Logs documentation says an invocation log includes the request, the response, and related metadata. How long those logs are kept depends on the Cloudflare Workers plan: 3 days on the Workers Free plan and 7 days on the Workers Paid plan, with a documented maximum of 7 days. This worker does not write its own log lines. A query string is not removed before logging, so filters in a page address can appear in that request record.
Cloudflare Web Analytics
This site uses Cloudflare Web Analytics from our host, Cloudflare. The host injects the beacon into HTML responses. The files this site publishes do not include that script.
This site uses Web Analytics through the automatic setup, which is enabled. It is not “Enable, excluding visitor data in the EU.” Cloudflare's get-started page (developers.cloudflare.com, leaves this site) says that option does not inject the JS snippet for visitors from the EU, and lists the other choices as “Enable with JS Snippet installation” and “Disable.” Cloudflare's site-info API calls that exclusion lite: when lite is on, the snippet is not injected for visitors from the EU (site-info API (developers.cloudflare.com, leaves this site)). This site does not use that exclusion. Cloudflare's RUM beacon page (developers.cloudflare.com, leaves this site) says customers can enable RUM globally or exclude users connecting to data centers in the EEA, the EU, Switzerland, and the UK. This site uses the option to enable RUM globally, not that exclusion.
Cloudflare's about page (developers.cloudflare.com, leaves this site) says: “Cloudflare Web Analytics does not collect or use your visitors’ personal data.”
Cloudflare's RUM beacon page (developers.cloudflare.com, leaves this site) says the beacon does not store any data in the browser or access storage data such as cookies, localStorage, sessionStorage, IP address, or IndexedDB. It says the collected data is performance data from the browser performance APIs, and that this data is ephemeral and only relates to the current webpage that is being viewed. The same page's field table lists: the unique ID for the page, the referring page URL, a baseline for performance-related timestamps, memory heap size, timing data, navigation timing data, paint timing data, First Contentful Paint, Largest Contentful Paint, Cumulative Layout Shift, Time to First Byte, Interaction to Next Paint, and the landing page URL. It says the service receives the client/source IP address as part of normal HTTP request handling, discards that address at the nearest Cloudflare data center, and does not store it in core databases or logs. It also says RUM data may be processed in a different country or region from where it originated.
Data origin and collection (developers.cloudflare.com, leaves this site) says: “Web Analytics collects the minimum amount of information - timing metrics - to show customers how their websites perform. Cloudflare does not track individual end users across our customers’ Internet properties.” The beacon loads from static.cloudflareinsights.com. For a site proxied through Cloudflare, that page says the beacon data is sent to the site's own /cdn-cgi/rum path.
Core Web Vitals (developers.cloudflare.com, leaves this site) says the beacon does not use cookies or localStorage to collect those usage metrics, and that Vitals Explorer does not fingerprint individuals via their IP address, User Agent string, or any other data. That fingerprint sentence is Cloudflare's statement about Vitals Explorer.
Cloudflare's FAQ (developers.cloudflare.com, leaves this site) (last updated Jul 14, 2026; checked Nov 10, 2026) says the beacon fires on every page view, unsampled beacon data is kept for 7 days and then aggregated, and the data can be accessed for the previous six months. It says Web Analytics does not log query strings. For automatic injection on a proxied site, the same FAQ says the beacon reports to this site's /cdn-cgi/rum endpoint. A manual snippet, which these pages do not include, would report to cloudflareinsights.com instead.
Affiliate links
There are no affiliate links and no affiliate tracking on this site today.
A static file, /avantlink_confirmation.txt, is published so AvantLink can confirm that we control this site for an application. The pages do not load that file, and it does not set a cookie.
If affiliate links are added later, partner networks (for example Rakuten Advertising, AvantLink, and FlexOffers) may set cookies when a reader clicks through. The disclosure will be updated before that happens.
What an affiliate click sends
This site has no affiliate links today. A reader cannot follow one, and no advertiser or network sets a cookie from a click on these pages.
An affiliate link, once one exists, is a click that opens the network's domain. Rakuten Advertising is one such network. After that click, on their own domains, the advertiser, Rakuten Advertising, and other parties can set cookies and similar tracking. These pages do not set those cookies.
Today this site shares nothing with an advertiser or with Rakuten Advertising beyond what a click-through sends. There is no click-through, so that share is nothing. This site does not collect a name or other personal data to send them.
A click-through is the browser requesting the network's domain. With that request the browser sends the address of this site's page (the referrer) and cookies stored for those domains. This site does not add personal data to the request.
You can block or delete cookies in your browser, including cookies those domains set after a click. Rakuten Advertising's privacy policy is https://rakutenadvertising.com/privacy-policy/ (rakutenadvertising.com, leaves this site). Its cookie policy describes blocking cookies in the browser: https://rakutenadvertising.com/cookie-policy/ (rakutenadvertising.com, leaves this site).
Your choices
You can block or delete cookies in your browser. This site does not set one for you to delete.
Cloudflare Web Analytics, described above, measures page views and performance in the browser. The Cloudflare documentation checked on Nov 10, 2026 does not state that this beacon honors Global Privacy Control or Do Not Track. Those signals do not switch off the host request logs described above. Cloudflare's FAQ (developers.cloudflare.com, leaves this site) says some ad blockers block the analytics beacon.