Privacy

Privacy.

Last updated 2026-05-03

This is a personal site. I try to collect as little about you as possible. This page is the honest list of what is collected, why, and how to make it go away.

What's collected

• Anonymous request logs. Cloudflare, which serves the site, records standard request metadata — IP address, user-agent, page requested, country — for security and abuse mitigation. No analytics tracker is loaded. No third-party cookies are set.
• Subscriber email (only if you sign up). If you enter your email in the subscribe form, it is sent to Loops, the email service that handles the newsletter. Loops stores your email and any unsubscribe preferences. You can unsubscribe at any time using the link in any email — no account login required.
• One small cookie. A single optional cookie called adm_owner may be set on the site owner's own device only. It contains an opaque token, expires after a year, and exists so the site can keep its "currently in" location pin updated when the owner visits. It is not used to track readers.

What's not collected

• No analytics scripts (Google Analytics, Plausible, Fathom — none).
• No advertising, no retargeting, no third-party ad cookies.
• No social-media trackers (no Facebook Pixel, no LinkedIn Insight, etc.).
• No comment system that tracks across sites.
• No personal data is sold or shared with anyone.

Where data is stored

All site infrastructure runs on Cloudflare (Workers, D1, R2). Cloudflare's privacy policy applies to the infrastructure layer. Newsletter data lives at Loops; their privacy policy applies to that data.

Your rights (GDPR / CCPA)

You can ask me to delete any personal data I hold about you, or to export it. The realistic list of "personal data I hold about you" is one row: your email, if you subscribed.

• Unsubscribe: click the link at the bottom of any newsletter email.
• Delete my email entirely: reply to any newsletter, or write to hello@adamou.me. Within 7 days the record is removed from Loops and the site's database.
• Export: the export is the same email address you gave me. Email me if you want it formally confirmed.

Cookies in detail

The site sets exactly one cookie:

• adm_owner — only on the site owner's claimed device, used to keep the location pin current. HttpOnly, Secure, SameSite=Lax. One year. You will never see this cookie set on your device unless you've explicitly visited /api/claim?token=... with the right token.

No analytics cookies, no advertising cookies, no consent management platforms. The cookie banner shown to first-time visitors is a simple acknowledgement; dismissing it sets a tiny localStorage flag (not a cookie) so it doesn't reappear.

Comments & spam

If you leave a comment, your name and email are stored alongside it. The email is never published — only the name appears next to your comment. Your IP is one-way hashed (SHA-256) for moderation purposes; the raw IP is never stored. Comments are held for moderation before publishing.

Spam is filtered with Cloudflare Turnstile (a privacy-respecting alternative to reCAPTCHA — no Google, no third-party tracking). Comments containing more than two links are auto-rejected. A small "honeypot" field catches simple bots.

Children

This site is not directed at children under 13. I don't knowingly collect data from minors.

Accessibility

This site aims to follow WCAG 2.2 AA. It uses semantic HTML, visible keyboard focus styles, a skip-to-content link, sufficient color contrast in both light and dark themes, and reduced-motion-friendly animations. If anything is hard to use with assistive technology, email me at hello@adamou.me and I'll fix it.

Changes

If this policy changes I'll update the date at the top of this page. Material changes will be flagged in the next newsletter, if any.

Questions: hello@adamou.me. This is a personal site; views are my own and do not represent any institution.