Privacy Policy

• No accounts, no logins, no comments, no newsletter, no forms. Nothing asks you for your name or email.
• No advertising network, no remarketing, no ad or cross-site tracking pixels.
• Aggregate page-view analytics only, used to see which articles get read.
• Personal information is never sold, rented or shared with data brokers.
• The site is static HTML served over HTTPS. It stores nothing about you on its own servers, because it has none.

Information you give: only what you choose to put in an email to one of the addresses on the contact page. Those messages are kept in the mailbox they arrive in, used to reply, and not added to any list.

Information collected automatically: standard web request data — IP address, browser user-agent, referring page, the URL requested and the time — is processed by the host to serve the page and by the analytics service described below. Analytics is reported to the publisher only in aggregate: page views, rough country, device class. The publisher cannot identify an individual reader from it.

The site itself sets no cookies for tracking. Your theme choice (dark or light) is kept in your browser's localStorage so the page does not flash on reload; it never leaves your device.

Google Analytics sets its own first-party cookies (_ga, _ga_*) to count a returning visit as one visitor rather than two. Blocking them, or using any content blocker, costs you nothing on this site — every page works identically.

These are every external service a page on this site contacts, and why:

Only to run and improve the site: keep it online, understand which articles are worth writing more of, and reply to email. It is never used for profiling, scoring, automated decision-making or advertising, and it is never sold.

Analytics data is retained by Google for the shortest retention window the product offers and is aggregated well before that. Host request logs roll off on the host's own schedule, typically within 30 days. Email is kept as long as the correspondence is useful; ask and it will be deleted.

Because no account exists, the simplest control is the strongest: use a content blocker or Google's Analytics opt-out add-on and the site sees only an anonymous request. Global Privacy Control and Do Not Track signals are honoured: no cross-site tracking happens here either way.

If you are in the EU, UK, California or another jurisdiction granting rights of access, correction, deletion or portability, write to privacy@scalefirst.org. Requests are answered within 5 business days. In practice the honest answer is usually that nothing identifying you is held — and that will be confirmed in writing. Under the CCPA/CPRA: no personal information is sold or shared, and no reader is discriminated against for exercising a right.

The site is not directed at children under 13 and does not knowingly collect information from them.

Every page is served over HTTPS with HSTS. The site is static, so there is no database, no user data store and no login to breach. Vulnerability reports are welcome at security@scalefirst.org — see /.well-known/security.txt.

The site is operated from United States and served worldwide from a content delivery network, so requests are handled on servers in several countries. By reading the site you accept that this transfer happens.

If this policy changes materially, the date at the top of this page changes with it. There is no mailing list to notify, so re-reading this page is the way to see where it stands.

ScaleFirst, United States — privacy@scalefirst.org. Full details on the contact page.