Privacy, following one visit from start to finish

A small program on Cloudflare's network, which sits in front of these pages, writes one log line when a page of passondayone.com is opened and at least one of these is true:

1. your browser sends a Referer naming another website, for example a results page from a search engine, a forum thread or a link in a chatbot's answer;
2. the address carries a utm_source tag;
3. an AI assistant requests the page because a person asked it to, or a crawler that indexes for AI search requests it. ChatGPT, Perplexity, Claude, Mistral and DuckDuckGo's assistant all have such agents on the list; crawlers that collect text for model training are left off it deliberately.

Each line records:

• which page was opened, and the Referer exactly as your browser sent it;
• any campaign tags on the link (utm source, medium and campaign);
• whether the visitor was an AI agent, and if so its name;
• your IP address, with its autonomous system number and the name of the operator behind it;
• an approximate location derived from that address: city, region, country;
• the User-Agent string.

The line goes to our own statistics server once the response is already on its way to you, which is why it cannot slow the page or alter it. We use it for one thing: counting how readers find the site.

Clicking between pages here writes nothing. Nor do visits with no outside origin, such as an address you enter yourself or a bookmark without a Referer, pages a browser fetches ahead of time, or requests for images, fonts and style sheets. No cookie is placed, and neither local nor session storage is used. Requests to www.passondayone.com are redirected to the bare domain.

Practice tests are graded in your browser by code that ships with the page. The options you pick go nowhere and are gone once you leave; no score is stored against you.

Many pages link to HPCC, IC&RC, BRPT, the six boards we checked for the counselor exam and the test vendors. HTML responses carry a Referrer-Policy value of no-referrer-when-downgrade. In practice, a site reached over https learns the exact URL of the page you left from, while a site on plain http learns nothing. What that site records afterwards is up to its own policy.

Cloudflare hosts the site, carries every request to it and filters attacks along the way. Its handling of request data is covered by Cloudflare's privacy policy.

This notice matches the site as it worked on the update date shown on this page. A question about it has nowhere to go yet; the contact page explains why.