What we collect, and why

This Privacy Policy explains what information we collect when you visit this site, how that information is used, who we share it with, and the choices you have. We have tried to write it in language a regular reader can actually parse — no forty-page terms-of-service novella, no buried clauses. If something is unclear, write to us at hello@example.com and we will rewrite it. This policy applies to every page on this domain, including the homepage, article pages, expert profile pages, tag pages, and the static pages listed in the menu.

1. Who we are

This site is an independent editorial project about the writers we feature and the pieces they produce. The site is operated by a single editor-publisher who curates the contributing-expert lineup, edits each piece, and publishes the archive here. We are not affiliated with any other publisher, network, or syndication partner. For the purpose of GDPR, we are the data controller of any personal data described in this policy. You can reach us at hello@example.com.

2. Information we collect directly

This site does not require an account to read. We do not ask for your name, email, age, gender, or location as a condition of access. The only place we collect personal information directly is on the Contact page, where the form asks for your name, email, and a short message. We use that information only to reply to you, and we delete it after the conversation is finished. We do not sell, rent, or trade contact-form submissions.

3. Information collected automatically (server logs)

Like almost every site on the public web, our hosting infrastructure automatically logs certain technical information when you load a page: your IP address (in truncated form where the host supports it), browser type and version, the page you came from, the page you visited, your operating system, and a coarse-grained timestamp. We retain these logs for up to 90 days for the purpose of operating the site, debugging problems, and estimating aggregate traffic patterns. We do not link this data to a named individual, and we do not use it to build a profile of you.

4. Cookies and similar technologies

A cookie is a small text file a website asks your browser to store, and to send back with each future request to the same site. We use cookies and similar storage (localStorage, sessionStorage) for the purposes listed below. You can disable cookies in your browser at any time; the site will still work, but some conveniences — like remembering which article you last read — will degrade.

5. Third-party vendors — Google AdSense

This site displays ads served by Google AdSense. AdSense uses cookies to serve ads based on a user's prior visits to this site or other sites on the open web. Google's use of advertising cookies enables it and its partners to serve ads based on the visit to this site and/or other sites on the Internet.

Specifically, Google, as a third-party vendor, uses cookies to serve ads on this site. Google's use of the DART cookie enables it and its partners to serve ads to our users based on their visit to this site and/or other sites on the Internet. Users may opt out of the use of the DART cookie by referring to Google's Ads Policy.

You may also opt out of personalized advertising from Google and other participating advertisers through your Google Ads Settings, or by visiting www.aboutads.info to opt out of personalized advertising from many participating advertisers, or by installing the Google Analytics Opt-Out Browser Add-on if you want to opt out of Google Analytics tracking across all sites.

6. Other third-party services

In addition to Google AdSense, the following processors may handle limited data on our behalf, solely to operate the site. Each has been selected for compliance posture and a published data-processing addendum:

• Hosting provider — serves the site's HTML, CSS, JavaScript, images, and JSON files. Logs IP address and request metadata for 30–90 days.
• Email delivery provider — sends our reply when you submit the contact form. Receives your name, email, and message body; does not receive browsing data.
• CDN (if applicable) — caches static files at edge locations. May see IP address and requested URL.

We do not embed third-party fonts, third-party analytics trackers, social-share widgets, or tracking pixels from any network other than Google AdSense.

7. Do Not Track (DNT) and Global Privacy Control (GPC)

If your browser sends a Do Not Track signal or a Global Privacy Control signal, we honor it as a request to opt out of personalized advertising and non-essential tracking to the extent we are technically able. The DART cookie and Google's ad personalization are governed by your choices in Google Ads Settings — turning off personalization there propagates to all Google-partnered sites including this one.

8. How we use the information

We use the small amount of data we receive for narrow goals — to deliver the page you asked for, to remember your navigation preferences, to estimate which topics readers return to, to debug problems, to keep the advertising we serve appropriate and non-duplicated, and to respond to any message you send via the contact form. We do not build personal profiles; we do not sell your data to data brokers; we do not share what we know about you with third parties except as required to operate the site (hosting, email reply, legal requests).

9. Data retention

Server logs are retained for up to 90 days, after which they are aggregated or deleted. Contact-form submissions are kept only as long as we are actively corresponding with you, and then deleted. Cookies set by this site expire on a rolling basis (specific lifetimes are visible in your browser's cookie inspector). Cookies set by third parties are governed by those third parties' retention practices.

10. Data security

We take reasonable measures to protect the limited data we hold: HTTPS for all traffic, principle-of-least-privilege access controls on our hosting account, no third-party access to private keys, and prompt patching of any reported vulnerabilities in our software. That said, no system is perfectly secure. In the event of a data breach that materially affects your personal information, we will notify affected users at the email address they provided (or, if no email is on file, via a prominent notice on the homepage) as soon as reasonably practicable and in any event within 72 hours of becoming aware of the breach, consistent with GDPR Article 33.

11. Children's privacy — COPPA and GDPR-K

This site is not directed at children under 13, and we do not knowingly collect personal information from anyone in that age group, in compliance with the U.S. Children's Online Privacy Protection Act (COPPA). We likewise do not target or solicit visitors under the age of digital consent in their jurisdiction (16 in most EEA countries, 13 in the UK and most U.S. states). If you believe a child has submitted personal information through the contact form, please email hello@example.com and we will delete the submission promptly.

12. Your rights — California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to know what personal information we have collected about you in the past 12 months, the right to delete it, the right to correct it, the right to opt out of its sale or sharing, and the right to limit the use of sensitive personal information. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. To exercise any of these rights, email hello@example.com with a description of your request and we will respond within 45 days. You may also designate an authorized agent to make a request on your behalf.

13. Your rights — Virginia, Colorado, Connecticut, Utah, Texas

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA) have analogous rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any of these rights, email hello@example.com.

14. Your rights — European Economic Area, UK, and Switzerland (GDPR)

If you are in the EEA, the UK, or Switzerland, you have the right to access, rectify, erase, restrict the processing of, object to the processing of, and port your personal data, as set out in the General Data Protection Regulation (GDPR) and the UK GDPR. You also have the right to lodge a complaint with your national data-protection authority (for example, the ICO in the UK, the CNIL in France, the BfDI in Germany). Our legal basis for processing the limited data described above is your consent (for non-essential cookies and any contact-form submission) and our legitimate interest in operating a public website (for server logs and security). You may withdraw consent at any time without affecting prior lawful processing.

15. International data transfers

Some of our service providers (hosting, advertising delivery, email) may process data outside your country of residence. Where we transfer personal data from the EEA, UK, or Switzerland to a country whose data-protection laws have not been recognized as adequate by the European Commission, we rely on standard contractual clauses adopted by the European Commission, or on the provider's certification under the EU-US Data Privacy Framework, or on your explicit consent.

16. Automated decision-making

We do not make any decisions about you based solely on automated processing that produce legal or similarly significant effects. The advertising served by Google AdSense may be personalized using automated systems, but those systems do not make decisions that affect your access to services, your legal rights, or your economic circumstances.

17. Third-party links

Articles on this site may contain links to external websites for the purpose of citing research, recommending books, or pointing readers to additional resources. We are not responsible for the privacy practices of those external sites. If you click a third-party link, read the destination site's privacy policy before submitting any personal information.

18. Changes to this policy

If we change this policy in a material way — for example, if we begin collecting a new category of information, change a third-party processor, or alter our legal basis for any processing — we will update the "Effective" date at the top of this page and append a short note to the change log below. Continuing to use the site after a change constitutes acceptance of the revised policy. If a change is significant, we will make a reasonable effort to give more prominent notice.

19. Contact us

For any privacy-related question — including a CCPA / CPRA / VCDPA / GDPR request, a takedown, a question about a specific cookie, a concern about content, or anything else — write to hello@example.com. We aim to respond within 48 hours. For formal requests, please include enough information for us to verify your identity and locate the relevant data.