Your inbox is not a growth database.

Data we process

• Email address while a subscription is pending or active.
• Subscription status, consent request, confirmation, delivery and unsubscribe timestamps.
• The public page path where the subscription was requested.
• A one-way email identifier used in audience and campaign records.
• Email-provider message identifiers and delivery errors needed for reliable retries and auditing.
• A short-lived, one-way network identifier and hourly counter for abuse prevention. The raw IP address is not stored by this newsletter feature.

Why and how we use it

The legal basis for newsletter delivery is your consent. A confirmation message verifies that the address owner requested the subscription. Operational records are also used to prevent duplicate delivery, retry temporary failures and demonstrate that a delivery or unsubscribe action occurred.

Storage, providers and retention

Subscription records are stored in Cloudflare R2. Confirmation and newsletter messages are sent through the configured email delivery provider, currently designed for Resend. These providers process only the data required to host or deliver the service.

Unconfirmed subscription records become eligible for scheduled removal after seven days. Abuse-prevention counters become eligible after 48 hours, and retention cleanup runs at least weekly. When you unsubscribe, the stored email address is removed immediately; a one-way identifier and non-personal delivery audit may remain to honour the unsubscribe and protect the integrity of past campaign records.

Sharing and public telemetry

The article share menu records only the selected share channel and the internal article path. It does not store the text you add on another platform or identify the person sharing. Opening a third-party share destination is subject to that service's own privacy terms.

Optional website analytics

Google Analytics 4 is off until you choose “Allow analytics”. If you allow it, Google's tag measures page views and visits using analytics cookies such as _ga. Google may receive the page address, visit time, browser and device details, and an approximate location derived from your network connection. We do not enable Google advertising personalization with this tag. Read Google's privacy policy for information about its processing.

You can reject analytics without affecting the site. Your choice is stored in this browser's local storage so we can remember it on later visits. Use the “Cookie settings” button on any public page to change your choice; withdrawing permission stops the tag on the next page load and removes this site's Google Analytics cookies from the browser.