Privacy policy
This site collects as little as possible.
Browsing
- No cookies. No analytics scripts, advertising, social-media widgets, or third-party fonts.
- Our web host (Namecheap) records standard server access logs for every request: IP address, time, page requested, status, referring page, and browser type. We use only the aggregate statistics built from these logs (AWStats in the hosting control panel) to count visits. We do not combine these logs with other data, and we do not sell or share them. The host controls how long its server logs are kept and does not publish a fixed period.
Forms
- Contact and error reports: We receive what you type, plus an email address if you choose to give one so we can reply. Each message is (1) emailed to the project's inbox and (2) saved as a copy in a private file on our hosting account, outside the public website folder, so nothing is lost if an email fails. The saved copy is deleted automatically after 90 days. Messages in the email inbox are deleted within 90 days after they have been handled, unless they lead to a published correction (the correction itself appears on the corrections log without your name or email).
- Who can see messages: the person who runs this project, and an AI assistant that helps sort the project's inbox. Our hosting company (Namecheap) and email provider can technically access stored data as part of providing their services.
- Email updates (optional): We store your email address, the time you signed up, and the time you confirmed. You must confirm by clicking a link we email you (double opt-in). Unconfirmed sign-ups are deleted after 48 hours. Every email includes an unsubscribe link, and unsubscribing deletes your address from the list.
- Spam protection: to limit repeated form submissions, the site stores a keyed hash of your IP address: HMAC-SHA256 with a secret server key, combined with the current date so the value changes every day. We don't store your raw IP address in our application (our host's server logs, described above, may record it). Each hash is needed only for a one-hour rate-limit window; expired hashes are deleted automatically, whenever the forms are used and by a daily scheduled cleanup. Form messages are not linked to these hashes.
- We never sell, rent, or share form data, and we do not use it for anything except the stated purpose.
Share links
The share buttons are ordinary links. Nothing is sent to X, Facebook, or anyone else unless you click one.
Contact
Questions, or requests to see or delete what we hold about you: use the contact form.
Last reviewed: . Found a mistake? Report an error.