Published

Reflections on running a self-hosted personal site in the year two thousand twenty-six

Yet again, a long drought between my last post and this one. Unusual for me in the reasonably recent past, now a common occurrence. I keep asking myself “why?”, why am I not posting as much when I loved it so much before?

Edit: Wow… I just realized my last post was almost a year ago.

While recently troubleshooting some bonkers bad bot traffic on an org website that I help maintain, I finally realized: It is getting a lot harder to maintain a self-hosted personal site. I’m seeing all of the same problems that org site is seeing, just at a slightly smaller scale and with less visibility since I haven’t had client-side analytics since late 2020.

Picture the scene.

Read more

Published

Anddddd here we go

Let’s see… since we arrived in the US late on Monday, I’ve signed up for Instacart, GrubHub, Postmates, 1stdibs, and Nextdoor with my “spam” email account. This is an account I only use for things that I suspect might get sketchy with my data. I am filled with regret.

I’m suddenly getting a lot more spam. Even though I’m now living in California under the CCPA, at least one of these platforms—let’s be real, probably a few of them—seems to be disclosing my email address to other unrelated service providers.

Shame on me for signing up, I guess? I haven’t identified the culprit, but I’m going to give it a go. Will also delete a few of these accounts.

I’ve just had a look at deleting my Nextdoor account and of course you have to contact them to do it. Unfortunately 1stdibs, Postmates, and GrubHub are all the same, you have to contact support to close your account. WHY? It absolutely doesn’t have to be like this! Scummy.

This is one of the bits about living in the US that I’ve been most dreading. Whelp, here we go.


Edit at 6:09pm:

I’ve sent CCPA requests to nearly all of them to find out more about the disclosure of my information. I can’t send one to Postmates since I only got through the very first step of signup, just gave them my email address and then never added my phone number since I don’t have a US mobile number yet. According to their privacy policy as of today:

We do not currently have a reasonable method of verifying the identity of non-registered users to a reasonable degree of certainty, as we do not maintain enough personal information to enable us to verify non-registered users with sufficient certainty. Thus, we cannot honor the access or deletion requests of non-registered users at this time.

Bull. Shit. In my humble opinion. Something as simple as a “forgot password”–style link would surely do. If it’s good enough for verifying identity for a password reset, it’s good enough for this purpose.

IDK why this makes my blood boil, but it does.