What this site keeps.

Page views are measured with Google Analytics 4 and Microsoft Clarity. Those scripts load from Google and Microsoft and may set a cookie under their policies.

Pages are built ahead of time. Reading an essay does not create an account. The newsletter form posts to /api/subscribe. If a Beehiiv or Buttondown key is configured for that deployment, the address is forwarded to that provider under their terms. If no key is configured, the address is checked for shape and then discarded. It is not written to a file on this site.

A hidden company field is a spam trap. If it is filled, the request is ignored.

Refresh on a tool page reads a public website and, when the entry names a GitHub repository, the latest public release. A short summary and timestamp are stored in the TOOL_REFRESH KV namespace when that binding exists. The raw page is not stored. Refresh does not collect an account or a cookie.

Member exports from Ghost, if you migrate them with the scripts in this repository, contain email addresses. Those files belong in private/ and data/subscribers.json, both of which are gitignored. Do not commit them.

Questions: irfan@checkops.com.