Privacy

I use Google Analytics 4 (property G-Z3E088WFBD) to see which pages people read and roughly where they came from. It is configured to deny advertising storage, advertising user data and ad personalization outright — not ask and then deny, denied by default and never requested. I run no ads on this site and no remarketing, so there is nothing to weigh against it. Analytics cookies are used.

If you would rather not be counted, any browser-level tracking block or Google's own opt-out extension will stop it, and nothing on this site breaks if you do.

If you give me your email address, I store the address and which page you signed up on. That is all. I do not buy, sell, rent or share the list.

At the moment there is no mail provider connected to it, which means no email is sent automatically and you will not get a confirmation. When that changes, every message will carry an unsubscribe link, and you can ask me to remove you at any time before then.

Some essays have a poll. A vote stores the poll, the option you picked, and a one-way hash of your IP address with a secret salt. Not your IP — the hash exists so that voting twice changes your answer instead of adding a second one, and it cannot be turned back into an address.

Sign-ups, votes and sign-in attempts are rate limited by IP. Those addresses are held in memory for a few minutes and never written down.

Essays and project pages embed YouTube players. They are served from youtube-nocookie.com, which does not set YouTube's tracking cookies when the player loads — only once you actually press play. Once you do, or if you follow any link to YouTube, you are under Google's privacy policy rather than mine.

Some essays link to books and gear on Amazon as an Amazon Associate, which means I may earn a commission. Those links are marked where they appear. Following one hands you over to Amazon, who track you on their own terms.

Exactly one, and it is not for you: a session cookie for the admin area, set only when I sign in to edit the site.

This site sends browsers a content security policy, and browsers report anything that would have violated it back to the site. Those reports record which rule was tripped, what was blocked and which page it happened on. They are written to the server log and contain nothing about who you are.

If you write to me, I have your email and whatever you said in it, in my mailbox, for as long as I keep it. I do not add you to the newsletter because you wrote to me. jlbunnell@gmail.com is the address for everything that is not a privacy question.