Endpaper Labs LLC
Privacy
Last updated 4 August 2026
The short version
This site is a shelf. It has no accounts, no sign-in, no forms and no payments, and it sets no cookies. It uses self-hosted, cookieless analytics to count page views, which product cards remain visible for at least a second, clicks on selected product, support and contact links, and page performance. Each product on the shelf is a separate service with its own privacy policy, linked below.
What this site collects
Privacy-preserving site analytics, through Umami, which is software we run ourselves, on our own server, rather than a third-party analytics service. It records:
- the page you viewed and the referring page, if any
- browser, operating system, device type, screen size and language
- an approximate location (country, region and city) worked out from your IP address at the moment of the request
- counts of product cards that stay at least half-visible for one second, and product, store, support and contact links clicked, including product privacy and terms links
- Core Web Vitals and related page-load timings, including measurements of loading speed, responsiveness and visual stability
Umami does not store your IP address. It uses the address momentarily, together with your browser's user agent and this site's ID, to derive the approximate location and create a pseudonymous session hash that groups activity into visits. The IP address is then discarded; there is no field for it in our analytics database. The session hash is not an account, name, email address or cross-site identifier, and we do not assign a separate identity to you. No cookies are set, and nothing is written to your browser's storage.
Event details are limited to categorical labels such as product, destination, placement and method. We do not send typed content, email addresses or destination URLs as custom event data, and analytics URLs exclude query strings and fragments. If your browser sends a Do Not Track signal, the analytics script is configured to send none of these measurements.
What this site does not do
- No advertising, ad networks or ad SDKs.
- No third-party trackers, social pixels or cross-site tracking.
- No selling or renting of analytics data, and no sharing it for advertising.
- No email collection. The only address on this site is ours.
This is what the pledge at the foot of our home page means. These aggregate measurements tell us which products people explore and whether the site performs well. They remain within this site's self-hosted analytics and are not used to follow visitors elsewhere.
Fonts
To render this site's typefaces, your browser requests a stylesheet and font files from Google Fonts. Those requests give Google the technical details needed to serve the files, including your IP address, user agent, the file requested and this site's referring origin. They do not include our Umami events or analytics database. Google states that its Fonts API sets no cookies and does not use this information to profile visitors or target advertising; its Google Fonts privacy FAQ has the details.
The volumes
Each product is its own service, collects its own data, and has its own policy. We do not share this site's Umami analytics records or session hashes with them, and this policy does not govern them. If you follow a product or store link, its destination receives the ordinary referral and campaign information carried by that link.
Where it lives
This site's origin server and its analytics run on a server we operate in the EU, rented from Hetzner. The analytics database is ours; no analytics vendor receives a copy.
Separately, the servers and reverse proxies that deliver and protect this site must process IP addresses and may keep limited operational or security logs. We do not use those logs for product analytics, and retain them only as long as needed for security and troubleshooting. We retain Umami analytics records for no more than 24 months, then delete them.
Your data, and asking about it
We are a California company, and residents of California and of the EU and UK have rights to access, correct, delete and port personal information a business holds about them. This site's analytics records are pseudonymous: they use session hashes, not names, accounts, email addresses or stored IP addresses. We cannot look up analytics records from an email address. Requests about a specific product should go to that product's policy, which describes what it holds and how to export or delete it.
If you want to ask anyway, write to hello@endpaperlabs.com and we will answer.
Children
This site is not directed at children under 13 and we do not knowingly collect personal information from them.
Changes
If this policy changes materially we will change the date at the top. There is no mailing list to notify, by design.
Contact
Endpaper Labs LLC, California · hello@endpaperlabs.com