Privacy
Privacy
This site uses Google Analytics to count visits, and collects nothing else about you. There is no advertising, no tracking pixel and no contact form. Apart from the analytics script, every page, font and image is served from this domain.
Analytics
Every page loads Google Analytics 4 (property G-4Y6XQRCZSG), which tells us which pages are read and roughly where readers come from. To do that it sets cookies in your browser and sends Google your IP address, the page you are on, and details about your browser and device. That data is processed by Google undertheir privacy policy, and we see only the aggregate reports — never a name, an email address, or anything you have typed.
We do not need this to serve you the page. If you would rather not be counted, any browser that blocks third-party scripts, any content blocker, orGoogle's own opt-out add-on will stop it loading, and the site works exactly the same without it.
Hosting
The site is a set of static files hosted on Cloudflare Pages. Like any web host, Cloudflare processes the technical details of a request — your IP address, the page requested, your browser's user-agent string — in order to deliver the page and to protect the site from abuse. That processing is Cloudflare's, governed by their privacy policy, and we do not receive or store those logs.
There is no contact form on this site — nothing here collects or transmits what you type. If you email [email protected], we hold that message in our mailbox so we can reply to it. We do not add you to any list because you wrote to us, and we do not pass your address to anyone else.
Newsletter
Reasonable AppSec is a separate service. Subscribing happens onbeehiiv, not here, and your subscription details are held by them under their privacy policy. Every issue carries an unsubscribe link, which works.
Podcasts
The shows are hosted by Buzzsprout and distributed through Apple Podcasts, Spotify and other directories. Downloading or streaming an episode is a request to those services rather than to this site, and each has its own privacy policy. Episode links on this site are ordinary links — nothing is embedded, so nothing loads until you choose to follow one.
Links elsewhere
Essays link out to other people's sites. Once you follow one, that site's privacy policy applies rather than this one. Nothing is embedded from elsewhere, so apart from the analytics script described above, no other site is contacted until you choose to go there.
Changes
If what this site does ever changes — an analytics tool, an embed, a form — this page changes with it. Questions are welcome at [email protected].