Most websites follow you around the internet. We don't. Here's exactly what that means, and how we've built this site to prove it.
When you visit most websites, invisible code runs in the background and reports your behaviour to third parties — often without your knowledge. Advertisers, social networks, and data brokers build detailed profiles of who you are, what you buy, what you read, and where you go online.
This happens through several mechanisms:
Small files placed on your device by companies other than the site you're visiting. Used to track you across multiple websites and serve targeted ads.
Tiny invisible images or JavaScript snippets from companies like Meta (Facebook), TikTok, and X (Twitter). When a page loads, these fire and tell those companies you visited — even if you never clicked an ad.
Millions of sites load fonts directly from Google's servers using a simple link tag. Every time that happens, Google receives your IP address, browser details, and the URL you're visiting. Most site owners don't realise this is happening. We host all our fonts locally — Google's servers are never contacted.
Tools like Hotjar and FullStory can record everything you type and every mouse movement, replaying your entire session. Common on e-commerce sites for "UX research." We use none of them.
Google Analytics is the most widely used tracking tool on the internet. It sends detailed behavioural data — pages visited, time spent, clicks, purchases — to Google. We have no analytics platform of any kind installed on this site.
Every technical decision on this site was made with your privacy in mind. This isn't a checkbox exercise — it's how we've built the entire site from scratch.
All fonts (Cormorant Garamond, Outfit, JetBrains Mono) are hosted on our own server. No Google Fonts requests, ever.
No Google Analytics, no Matomo, no Plausible. We don't track how you browse this site.
No Meta, TikTok, X, or Google advertising pixels. We don't retarget you with ads after you leave.
We only use essential session cookies (login, cart) stored on our own server. Nothing is shared with third parties.
We don't record your mouse movements, scrolling, or what you type. Your session is private.
We don't sell, rent, or share your personal data with anyone. Your order details stay with us.
<link href="https://fonts.googleapis.com/css2?family=...">/fonts/. This means no request ever leaves your browser to Google's infrastructure when you visit this site.
Blacklight is a real-time privacy inspector built by The Markup, an independent non-profit investigative newsroom. It visits a website as a real user would and reports every tracking technology it finds.
We scanned pcgcardiff.co.uk/ on 5 April 2026. Here are the results:
Scanned: pcgcardiff.co.uk/ — 5 April 2026
Run the scan yourself at themarkup.org/blacklight — enter pcgcardiff.co.uk/
We built this site ourselves, which means we control every line of code. We won't add tracking tools in the future to chase ad revenue or "optimise conversions." If we ever add any third-party service, we'll update this page and tell you exactly what it does and why.
Privacy isn't a feature for us — it's a baseline. You came here to buy seeds, not to be followed around the internet.