Privacy Policy

What gets collected

• Email signups. If you enter your email to subscribe, the address and timestamp are stored along with a random token used for unsubscribe. Email is used solely to send new posts and the occasional housekeeping note from this site.
• Sign-in accounts. If you sign in to comment, the auth provider (Supabase) stores your email, a display name, and an avatar URL. Your user ID is attached to anything you post.
• Comments and reactions. Whatever you post publicly is associated with your account and visible to other readers once approved.
• Server logs. The hosting provider (Vercel) keeps transient request logs that include URL, user agent, and IP address for operational and abuse-prevention purposes. These are not used for tracking and roll off automatically.
• Page-view analytics (own collection). Each page-view records: the path you visited, the referrer (which site sent you here, if any), the country / region / city of your visit (from Vercel's request headers — your IP is not stored), a coarse device classification (mobile / desktop / tablet / bot), an opaque per-session id, a first-party per-browser visitor id stored in localStorage, and your scroll / dwell / click activity on that page. The browser visitor id is one-way hashed before storage. If localStorage is unavailable, a short-lived IP + user-agent hash is used only as a fallback. This data is admin-only and used to understand which evidence pages are reaching people, what people engage with, and where support or subscription asks should be improved.
• Messages tied to sessions. If you leave a public live comment or send a private message, the comment or message may be tied to the same anonymous visitor/session identifiers so the admin can understand the path that led to the comment or request. Names, emails, phone numbers, and message text are only stored when you submit them.
• Vercel Analytics. The hosting platform's built-in analytics is enabled. Vercel counts page views and top referrers / countries / devices in their dashboard. It uses no cookies and stores no personal data — Vercel publishes its own privacy disclosures at vercel.com/legal.
• Speed Insights. Vercel's performance monitoring measures page-load speed (Core Web Vitals) in aggregate. No personal data.
• Analytics & advertising pixels. This site may load Google Analytics (GA4) and the Meta (Facebook) Pixel to understand how people find and use the site and to reach similar audiences on those platforms. When active, these set cookies and report activity to Google / Meta under their own privacy policies. You can opt out with a standard ad/tracker blocker or through Google's and Meta's ad-settings pages.

How email works

Emails to subscribers are sent through Resend. Every email contains an unsubscribe link that takes one click to honor — no login, no email-reply required. You can also reply to any email and ask to be removed manually.

New subscriptions are confirmed by email (double opt-in). You won't receive any post broadcasts until you click the confirmation link in the first email.

Sharing with third parties

Subscriber lists are never sold, traded, rented, or shared. The third parties involved in running the site are limited to:

• Vercel (hosting and request routing)
• Supabase (database, authentication)
• Resend (email delivery)

Each of those processors only sees the data necessary for its job and is bound by its own privacy terms.

Your choices

• Unsubscribe. Click the unsubscribe link at the bottom of any email. It is one click and takes immediate effect.
• Delete your account or comments. Email the address on the Support page asking for removal and it will be done.
• Right of access. If you want a copy of what is stored about you, ask and you will receive it.

Children

This site is not directed to children under 13 and does not knowingly collect their information. If you believe a minor has submitted personal data, email and it will be removed.

Changes to this policy

If this policy materially changes, the effective date above is updated and active subscribers are notified by email.

Contact

For privacy questions or data requests, see the Support page.