Privacy

Privacy

Short version: we collect as little as we can, and we never sell it or share it with anyone beyond the services named below that process it for us. Below is exactly what is collected today, and what will be collected once each piece is switched on.

Today

This site is a set of static pages. It sets no cookies and runs no advertising. Fonts, charts and their data are served from this domain. A few posts show images hosted elsewhere, such as Wikimedia Commons or a government agency; your browser fetches those from that host, which sees your IP address as any website would. The one thing the site stores in your browser is your light or dark theme choice, if you make one, and that never leaves your browser.

The share links under each post are plain links. Nothing from Bluesky, Threads, X, Facebook or Reddit loads on our pages; a platform learns of your visit only if you click its link and go there. The links carry tags naming the platform and the post, so our own counter can count a visit that comes from a share (see reading events).

The site is hosted by Cloudflare. Like any web host, Cloudflare handles your IP address to deliver pages and protect the site from attacks, under its own privacy policy. We do not collect or keep it.

Page view counts (Cloudflare Web Analytics), on since Oct. 14, 2026. A small Cloudflare script counts visits, pages, referring sites and countries. It uses no cookies or browser storage and does not fingerprint you. Processed by Cloudflare. We see only totals.

Reading events (our own counter), on. Counts such as "a page was viewed" (once for each page you open), "a source link was clicked", "a CSV was downloaded", "a chart was used", "a data table or the full check was opened", "a share link was clicked", "the subscribe form was sent" or "half the article was reached", each stored as the event, the page path and what was clicked. When you arrive by one of our own links on a social platform or in our newsletter, it also counts which platform or newsletter it was, from the link's tags, then removes those tags from your address bar so a link you copy is clean. No IP address, no identifier, nothing that links one event to another or to you. It sends nothing if your browser has Do Not Track or Global Privacy Control on. Stored in Cloudflare Workers Analytics Engine, which deletes it after three months.

Once switched on

Each of these is built but off. This page will say so here when one is turned on.

• The newsletter (Buttondown). If you subscribe, your email address goes to Buttondown, which sends the newsletter for us. Buttondown can record whether an email was opened or a link in it was clicked when those settings are on. See Buttondown's privacy policy.
• The corrections form. What you type, and your email if you give it, is filed as an issue in our private GitHub repository so we can review it. It is never published or committed. Processed by Cloudflare, which runs the form, and GitHub, which stores the report. The form carries a Cloudflare Turnstile check, which loads from Cloudflare when you open the corrections page and tells people from automated scripts.

Unsubscribing and deletion

Every newsletter email has an unsubscribe link; one click removes you. To ask us to delete your address or a report you sent, use the corrections form and say so, and we will remove it.