Privacy policy
A notice at collection: the categories of personal information this site handles, who else ever sees them, and what you can do about it
The short version
Below is a notice at collection: the categories of personal information this site handles, in the words United States privacy law uses for them, with what each one actually is here, why it exists, who else ever receives a copy and how long it is kept. After the table come the choices you have, and then two short sections for readers covered by California law and by European law. Cookies are a separate document, because the question people arrive with about cookies is not “which category” but “what is on my machine”: that is the cookie policy.
Notice at collection
| Category, in the statute’s words | What it is on this site | Why it exists | Who else ever sees it | How long |
|---|---|---|---|---|
| Identifiers | Your IP address, and the random number inside a measurement cookie if you allowed one. No name, no email address, no postal address, no phone number — unless you type one into a message yourself | An IP address is how a page gets back to you at all, and it is what lets abusive traffic be blocked | The hosting provider, which runs the server, and the content delivery network in front of it | Server logs rotate within weeks. A measurement cookie lasts as long as the cookie policy says, and you can delete it at any time |
| Internet or other electronic network activity information | Which page you asked for, when, which page you came from, and what your browser says it is | Serving the page, and knowing which pages are worth the work of improving | The hosting provider and the delivery network always; the measurement provider only if you allowed measurement | Weeks in the server log; up to fourteen months at the measurement provider |
| Geolocation data, coarse only | The country and region your IP address is registered in. Not the location of your device: this site never asks your browser for it and no page requests it | Knowing whether readers are in Philadelphia or planning a trip to it changes what is worth writing | The delivery network, and the measurement provider if you allowed measurement | Not stored separately by this site |
| Your own message, if you send one | Whatever you write: your name, your email address, the text of the message and the time it arrived | Answering you, and being able to show later that a correction was reported and handled | The email provider that delivers and stores the message | As long as the exchange is live, then in the mail archive |
| Sensitive personal information | None. Nothing here asks about health, race, religion, union membership, immigration status, sexual orientation, precise location, a social security number, a driver’s license, a passport, a bank card or a fare card number | — | Nobody | — |
| Inferences drawn to create a profile | None. No profile is built, no segment is assigned, no score is calculated and no automated decision is made about you | — | Nobody | — |
| Commercial, financial, biometric, employment, education and audio or visual information | None of it. This site sells nothing, so there is no transaction to record, and it has no accounts, so there is nothing to attach anything to | — | Nobody | — |
If something is not in that table, it does not happen. Nothing is bought from a data broker, nothing is enriched against a third-party dataset, and nothing is passed to anyone except the providers named in it — and to them only to the extent required to run the site and under contracts that forbid them to use it for their own ends. The one exception any honest notice has to state is a legal one: a valid court order or a legal obligation.
Where this sits, physically, and who runs the machines
The server is in the European Union and is run by a hosting provider on the publisher’s behalf. In front of it is a content delivery network, a United States company with European infrastructure, which filters traffic, absorbs attacks and delivers the pages from a location nearer to you; it sees the request before this site does. The audience measurement, if you allow it, is run by Google through its Irish entity, which means data can reach the United States under Chapter V of the European data protection regulation — the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses. The typeface is served from Google’s font service, which sets no cookie but does see your IP address when the page loads.
That is the whole list of third parties. There are no social media buttons that load another company’s code, no embedded videos, no embedded maps from a map company, no comment system, no chat widget and no tag manager. The map on this site is drawn by this site and served from it.
What you can do about any of it
Say no to measurement, or change your mind later
Measurement is off until you accept it, and refusing costs you nothing: no page disappears, no timetable is withheld, nothing is slowed down and you are not asked again on the next page. The privacy and cookie settings link at the bottom of every page reopens the same question, and withdrawing consent takes effect immediately — the measurement cookies are deleted at that moment. The practical details are in the cookie policy.
Clear what is already on your machine
Every browser can delete the cookies a site has set, under its privacy settings. Doing that here also deletes the record of your answer, so the question will be asked again. Google also publishes a browser add-on to opt out of its analytics that works independently of anything this site does.
Ask what is held about you, or ask for it to be deleted
Write to [email protected] or use the contact page and say which right you are exercising. You get an answer, free of charge, within thirty days; if the request is complicated you will hear within those thirty days that it is taking longer. One honest caveat about the server log: you cannot be found in it unless you supply the IP address and the time yourself. That is not an excuse. It is the consequence of not keeping any means of identifying a reader, which is the version of this that favors you.
If your browser sends a Global Privacy Control signal
Nothing needs to be switched off for it, because nothing is sold or shared. The Global Privacy Control signal is honored in the only way it can be honored here: there is no sale and no cross-context behavioral advertising to stop. If that ever changes, this section changes first.
If you are in California
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know what personal information is collected and why, to get a copy of it, to have it corrected, to have it deleted, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be treated worse for exercising any of them. The table above is the notice at collection those rules require.
Three of those rights have a short answer here. Sale and sharing: neither happens. No personal information is sold, and none is shared for cross-context behavioral advertising, so there is no “Do Not Sell or Share My Personal Information” switch to offer you — a link that switched nothing off would be theater. Sensitive personal information: none is collected, so there is nothing to limit. Non-discrimination: there is nothing to discriminate with, because there are no accounts, no prices and no financial incentive program on this site.
To exercise the rest, write to [email protected]. An authorized agent may act for you with written permission that you can confirm. Because this site holds no account, the only way to verify a request is against what you can tell us about it, and a request that cannot be matched to anything will be answered saying so rather than answered with somebody else’s data. The California Attorney General publishes guidance on these rights.
Readers in other states with comparable laws — Colorado, Connecticut, Virginia, Texas and the rest — are welcome to use the same address and the same rights. The answer will be the same one, because the practice is the same for everybody and not tuned per state.
If you are in the European Union or the United Kingdom
The publisher’s establishment is in Spain, which brings everything described above under the General Data Protection Regulation and the Spanish data protection act. The controller is the publisher named in the legal notice, reachable at [email protected]. No data protection officer has been appointed: processing on this scale does not require one, and naming an officer who does not exist would be worse than having none.
The lawful bases, in one line each. Serving pages and keeping the site standing up: legitimate interests. Audience measurement: your consent, freely given, refusable without consequence and withdrawable at any time, and nothing happens before you give it. Your message: you sent it, and it is kept to answer you. Storing your cookie answer: to be able to show that you were asked and what you said.
You have the rights of access, rectification, erasure, restriction, portability and objection, and you can complain to a supervisory authority — for the publisher’s establishment that is the Spanish data protection agency, aepd.es — or go to court, without coming here first. Most things are quicker to fix with one message, but that is your choice and not a condition.
Children
Nothing on this site is directed at children under 13 and nothing on it asks anyone’s age. No personal information is knowingly collected from a child under 13 within the meaning of the Children’s Online Privacy Protection Act. If a message arrives that is plainly from a child, it is deleted rather than filed and not answered; if you believe a child has sent something, write to [email protected] and it will be removed.
Security, and changes to this notice
The site is reachable only over an encrypted connection, the software behind it is kept up to date, and administrative access is limited to the publisher. Those are reasonable measures and they are not an absolute guarantee; nobody can honestly offer one, and this notice does not.
This version is from November 2026. Changes are published on this page. If a change touches something that needs your consent, you will be asked again before anything happens — not afterwards. The version-number cookie described in the cookie policy exists exactly so that a quiet edit cannot carry an old yes into something you never agreed to.