What we collect, and why.

What we collect

The contact form: your name, email, organization if you give it, your message, and the page you sent it from.

A report download: your email, your name if you give it, and which report you opened.

The newsletter: your email, the page you signed up from, and when you confirmed.

With each of these, a one-way hash of your IP address, used only to slow down floods of automated submissions. We never store the address itself.

The newsletter

Signing up sends a confirmation link. Nothing else is sent until you click it, and an unconfirmed signup expires after seven days.

Once confirmed, we email new posts and reports when they are published, and nothing else. Every email has a one-click unsubscribe.

Ticking the box on a report download is the same signup, with the same confirmation step. Leaving it unticked never subscribes you.

Analytics

We use PostHog to see which pages are read and which links are used. Visitors are not identified by name or email, except when you submit a report download, which links that visit to the address you gave.

Session recording is off. We do not use advertising trackers and do not sell or share data with advertisers.

Who processes it

Submissions are stored in our Supabase database. Email is sent through Resend, which also holds the newsletter list and handles unsubscribes. Analytics go to PostHog. The site is hosted on Vercel.

We do not pass your details to anyone else.

Removal and questions

Email [email protected] to ask what we hold about you or to have it deleted. One of the founders reads every message.