Privacy

Short version: we collect as little as we can, and we never sell it or share it with anyone beyond the services named below that process it for us. Below is exactly what is collected today, and what will be collected once each piece is switched on.

Today

This site is a set of static pages. It sets no cookies and runs no analytics, advertising or third-party scripts. Fonts, charts and their data are served from this domain. A few posts show images hosted elsewhere, such as Wikimedia Commons or a government agency; your browser fetches those from that host, which sees your IP address as any website would. The one thing the site stores in your browser is your light or dark theme choice, if you make one, and that never leaves your browser.

The site is hosted by Cloudflare. Like any web host, Cloudflare handles your IP address to deliver pages and protect the site from attacks, under its own privacy policy. We do not collect or keep it.

Once switched on

Each of these is built but off. This page will say so here when one is turned on.

Page view counts (Cloudflare Web Analytics). A small Cloudflare script counts visits, pages, referring sites and countries. It uses no cookies or browser storage and does not fingerprint you. Processed by Cloudflare.
Reading events (our own counter). Counts such as "a source link was clicked" or "a CSV was downloaded", each stored as the event, the page path and what was clicked. No IP address, no identifier, nothing that links one event to another or to you. It sends nothing if your browser has Do Not Track or Global Privacy Control on. Stored in Cloudflare Workers Analytics Engine, which deletes it after three months.
The newsletter (Buttondown). If you subscribe, your email address goes to Buttondown, which sends the newsletter for us. Buttondown can record whether an email was opened or a link in it was clicked when those settings are on. See Buttondown's privacy policy.
The corrections form. What you type, and your email if you give it, is filed as an issue in our private GitHub repository so we can review it. It is never published or committed. Processed by Cloudflare, which runs the form, and GitHub, which stores the report. The form carries a Cloudflare Turnstile check, which loads from Cloudflare when you open the corrections page and tells people from automated scripts.

Unsubscribing and deletion

Every newsletter email has an unsubscribe link; one click removes you. To ask us to delete your address or a report you sent, use the corrections form and say so, and we will remove it.