Privacy Policy

1. Data We Collect

This site collects minimal data. We do not use cookies, tracking pixels, analytics, or third-party tracking scripts.

• Server logs: Standard Nginx access logs (IP, timestamp, requested path, user agent) rotated weekly.
• Newsletter subscriptions: Email addresses submitted via the Buttondown form are sent directly to Buttondown (their privacy policy applies).
• Email contact: Messages sent to hello@.com are received via email.

2. How We Use Data

• Server logs: Security monitoring, abuse detection, performance optimization.
• Newsletter emails: Only used to send new post notifications.
• Email contact: To respond to your inquiries.

3. Data Sharing

We do not sell, rent, or share your data with third parties except:

• Buttondown (newsletter processor) -- receives email addresses you submit.
• Legal requirements -- if compelled by law.

4. Data Retention

• Server logs: Rotated weekly, deleted after 30 days.
• Newsletter emails: Retained until you unsubscribe.
• Contact emails: Retained for correspondence history.

5. Your Rights

You may request deletion of your data by emailing hello@.com. Newsletter subscribers can unsubscribe via the link in any email.

6. Third-Party Services

• Buttondown: Newsletter delivery -- Privacy Policy
• GitHub Pages / Nginx: Hosting -- standard server logs
• Google Fonts: Self-hosted via preload (no requests to Google at runtime)

7. Security

This site uses HTTPS (Let's Encrypt), security headers (HSTS, CSP, X-Frame-Options), and runs on a hardened VPS with regular updates.