← Back
Privacy

Privacy

Short version: cookieless analytics, no tracking, no cross-site profile. The only personal data the site collects is the email address you enter in the book newsletter form, and only if you do.

Analytics

This site uses Umami, a privacy-respecting analytics tool. It records aggregate stats like which pages are viewed, the referring site, country, browser, and device type. It does not set cookies, track you across sites, or build a profile of you. IP addresses are used to derive country and then discarded.

No personal data is collected for analytics. Under GDPR, the ePrivacy Directive, and the Swiss FADP, this means no consent banner is required for analytics.

Book newsletter (The Weight of Small Decisions)

If you submit the email form on the book page, the following applies.

What is collected

  • The email address you enter
  • The IP address and User-Agent of the request, recorded once at signup as proof of consent (Art. 7(1) GDPR)
  • The timestamp of signup and, separately, the timestamp of confirmation

Lawful basis

Consent (Art. 6(1)(a) GDPR / FADP). You give consent by submitting the form and confirming via the link emailed to you. Subscriptions are not active until you confirm; unconfirmed signups are deleted automatically when the 24-hour token expires.

What it is used for

Sending one email when a major milestone in the book project lands (fat outline, sample chapters, proposal, draft milestones). Nothing else. No promotional emails, no third-party marketing, no transfer to other lists.

Where it lives

The list is stored in a Cloudflare D1 database (a managed SQLite instance) attached to this site. Confirmation emails are sent via Resend, which processes the email address solely to deliver the message. Both providers are GDPR-compliant data processors.

Retention

Confirmed subscribers are retained until they unsubscribe. Unconfirmed signups are removed automatically when the 24-hour confirmation window expires. On unsubscribe, the row is marked unsubscribed and no further emails are sent; the email is retained in suppressed form so re-subscription does not accidentally restore an old token.

Your rights

You can unsubscribe with a single click via the link in any email, or by emailing [email protected]. You can also request access, correction, or deletion of your record at the same address. Requests are honoured within 30 days.

Performance metrics

Essay pages send anonymous Core Web Vitals measurements (load time, layout stability, input responsiveness) to the same Umami instance. These help me find and fix slow pages. They carry no identifier beyond the page path.

Email

If you email me at [email protected], the message lives in my inbox and nowhere else on this site. I read it, I reply, that is the whole transaction.

Hosting and logs

The site is served by Cloudflare Pages. Cloudflare keeps short-lived access logs for abuse prevention and network operations. I do not access or query those logs.

External links

Outbound links to services like LinkedIn, X, or ChainAlign are governed by those services' own privacy policies.

Your rights

Since no personal data is stored on this site, there is nothing to access, export, or delete. If that changes, this page will say so.

Contact

Questions about this policy: [email protected].

Last updated 2026-04-30.