We don't track you. We don't set cookies. What we do log — and why — is documented below.
last updated: february 28, 2026
When you submit the contact form, we collect:
Submissions are routed through Resend, a transactional email service, and delivered to our inbox. We do not store form data in a database. Resend's privacy policy governs their handling of email delivery data.
Our contact form endpoint is processed by a Cloudflare Worker. Each request generates a structured log entry containing:
CF-Connecting-IP header)These logs are used exclusively to detect abuse, rate limiting, and spam. They are stored in Cloudflare's logging infrastructure and retained according to Cloudflare's standard retention periods (typically 7 days for Worker logs via the dashboard).
We do not sell, share, or use IP logs for any commercial or tracking purpose.
This site is hosted on Cloudflare Pages and served through Cloudflare's global network. Cloudflare processes all traffic as a reverse proxy and may log request metadata (IP, user agent, URL) as part of its standard infrastructure operation. See Cloudflare's privacy policy.
We load IBM Plex Mono and Syne typefaces from Google Fonts. When your browser requests these fonts, Google receives your IP address and user agent. See Google's privacy policy. No font request data is shared with us.
Some investigation pages load D3.js and Chart.js from the jsDelivr content delivery network. jsDelivr may log request metadata. All scripts loaded from jsDelivr include Subresource Integrity (SRI) hashes so your browser can verify they have not been tampered with. See jsDelivr's privacy policy.
We keep email submissions in our inbox for the duration of any active correspondence. If you want yours deleted, email us via the contact page with the subject "deletion request" — we'll remove it within 7 days.
Cloudflare log expiry is on their schedule, not ours.
US law applies. If you're in the EU: we're a small editorial operation. The only data processing is routing your message to our inbox so we can reply. No commercial use, no profiling, no third-party handoff.
If something significant changes, the date at the top of this page will say so.