Effective date: October 2, 2026. The site controller is Zafar Siddiqi. Privacy requests can be started through the Contact page.
Privacy-safe telemetry
When enabled, this site uses self-hosted Umami to understand aggregate usage and improve the site. It is configured as cookieless and does not collect email addresses, user IDs, fingerprints, session recordings, keystrokes, precise location, or full query strings.
The documented lawful basis is legitimate interest under Article 6(1)(f) GDPR: low-impact aggregate measurement helps maintain and improve the site. The balancing assessment considers the cookieless design, limited events, no advertising profile, and 90-day retention. No analytics opt-out control is currently provided.
What is measured
We measure pageviews and limited events such as article opens, RSS clicks, external-link hostnames, newsletter form outcomes, and 404 responses. Umami retention is configured for 90 days. Hosting and analytics infrastructure may process technical request data such as IP addresses in server logs; those providers must be covered by the applicable processor and transfer arrangements.
Newsletter
Newsletter email addresses are stored separately in Neon Postgres for subscription management. They are not sent to Umami telemetry. The subscription form requires affirmative consent, and the consent timestamp and policy version are recorded. The lawful basis is consent under Article 6(1)(a) GDPR; consent can be withdrawn at any time through the unsubscribe page.
Subscription records are retained until unsubscribe or a deletion request. The current site does not send double-opt-in confirmation emails; that provider-dependent control remains required before describing the newsletter as double opt-in.
Your rights
Depending on your circumstances, you may request access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent. Use the Contact page to make a request. You may also complain to the data protection authority in your place of residence or work.
Service providers
The site is hosted by Vercel, newsletter records are stored with Neon Postgres, and optional telemetry is handled by the configured Umami deployment. Provider locations, data-processing agreements, and any international-transfer safeguards must be reviewed and kept on file by the controller.