Privacy

The short version

Reading this blog stores nothing about you. No cookies are set, no advertising identifier is used, and nothing you do here is shared with anyone else. You only ever hand over data by choosing to: subscribing to the newsletter, or signing in to comment.

Reading

We count reads so we know which posts are worth writing more of. A read records the page path, the site you arrived from, and the date. Those are aggregated into one row per page per day and incremented, so the record is a number rather than a trail. There is no cookie, no fingerprint, and no identifier that follows you between visits or between pages. Bots and browser prefetches are excluded so the numbers mean something.

The newsletter

Subscribing stores your email address, optionally your name, the page you subscribed from, and the IP address the request came from. The IP is kept as evidence of consent and to rate limit abuse of the form.

Nothing is sent until you click the confirmation link. An address that never confirms is never mailed. Every email carries a one-click unsubscribe, which works without signing in and is honoured immediately. The list is never sold, rented, shared, or used for anything except these notes.

Delivery is handled by Resend, who process the message in order to send it. They are a processor acting on our instructions and do not use your address for their own purposes.

Comments

Commenting requires signing in with Google, GitHub or LinkedIn. We receive your name and email address from that provider and nothing else: no contacts, no posts, no permission to act on your behalf. We store your comment, the time, and the IP address it came from, which is used for rate limiting and for blocking abuse.

Comments are reviewed before they appear. Your email address is never shown publicly.

Seeing and deleting what we hold

Signed in, your account page lists everything held about you, and the delete button on it removes your account and every comment you have written, immediately and permanently. There is no retention period and nobody talks you out of it.

To be removed from the newsletter, use the unsubscribe link in any email or write to hello@jplevi.com.

How long things are kept

Reading counts are aggregate and kept indefinitely, because they identify nobody. Subscriber records are kept until you unsubscribe or ask for removal. Comments and accounts are kept until you delete them. Database backups are kept for fourteen days and then destroyed, so a deletion is fully gone within two weeks at the outside.

Where it lives

The site and its database run on servers in the United States, operated by an infrastructure partner on our behalf. If you are writing from the EU or UK we have not appointed an Article 27 representative; write to hello@jplevi.com and we will handle requests directly.

Changes

If this changes in a way that affects what we collect, the effective date at the top changes with it, and subscribers are told in a normal email rather than a silent edit.