Privacy

Public pages can be read without an account. We collect first-party aggregate counts for page views, reading completion, search categories, zero-result searches, editorial CTA clicks, and referrals from a fixed list of AI assistants. Search text and referrer URLs never leave the browser; they are reduced to broad categories before an event is sent. We do not assign visitor IDs, fingerprint devices, or store raw IP addresses in analytics. A short-lived HMAC of the network address is used only to enforce abuse limits.

Aggregate event records are grouped by UTC day and expire after 400 days. Public analytics honor the browser's Global Privacy Control signal and use no analytics cookies. The protected editorial studio uses one secure, HTTP-only session cookie for authorized staff. Operational hosting logs may still contain standard request metadata for security and reliability. We do not sell personal data or share analytics with advertising networks.