I just switched Hzzah.com‘s Apache configuration to use this line for logging:
CustomLog /srv/hzzah/log/access.log "0.0.0.0 %l %u %t \"%r\" %>s %b"
No more IP addresses logged! Only if you cause an error (404 or 500) will your IP address be logged.
So no javascript, css, or images from remote sites; no cookies; no ads. Can you get any more private?
I did just add jQuery and a bit of JavaScript, so if web2.0 makes you queasy, you’ve been warned.
I should mention that hzzah’s primary goal is for me to have fun with Django, not privacy. So while I’ll definitely warn you if I make any changes, right now its not a top priority to pursue extreme privacy.