Privacy

What the correction form collects

The correction form asks for a subject, a description of what should change, an optional evidence URL, and an optional contact email. The evidence URL is stored as plain text; we do not open submitted links automatically.

How long we keep it

We delete the contact email after 90 days. The correction itself stays in our editorial record without the email, so we can keep an audit trail of what changed and why.

To limit spam, the form also stores a one-way hash derived from the sender's network address. It cannot be read back as an IP address and is not used to identify you.

Analytics and cookies

Analytics is currently turned off. No analytics script runs, no page views are recorded, and no analytics cookies are set. If we turn analytics on, we will use a self-hosted Umami analytics server to count page views and clicks on purchase links. It is not an advertising network, it does not set cookies, and it does not track you across other sites. Browsing and buy links work normally whether analytics is on or off.

When analytics is on, Umami receives the page path without its query string, the page title, our site hostname, and — when you click a purchase link — the offer, book, merchant, relationship, placement, and book page. We strip referrers, screen size, language, distinct IDs, user IDs, search queries, and affiliate link URLs before the request leaves your browser.

When analytics is on, Umami processes the request IP address and browser user agent to derive an anonymous session identifier and coarse browser, operating system, device, and location information. The IP address is not stored as a field. The session identifier is a rotating anonymous ID derived from the IP address, user agent, and a salt that rotates monthly. We accept it as the one exception to our no-session-ID rule; it is used only to group pageviews and clicks from the same visit.

If analytics is turned on, its rows will be stored in PostgreSQL on our self-hosted analytics server. Raw analytics rows are deleted after 90 days by our retention procedure, and backups follow our backup retention policy.

When analytics is on, you can export it from the Umami dashboard as CSV files. To ask us to delete analytics data, use thecorrection form and say what you want deleted. Because we do not collect user IDs, we cannot isolate one person's records; we can delete the analytics data set or the rows that match details you provide. You can also ask us to delete your correction email sooner than 90 days.

Corrections and deletion

To ask for a correction, or to have a correction you sent deleted, use the correction form and say what you want changed. Include an optional email if you want a reply. You can also ask us to delete your email sooner than 90 days.