[{"data":1,"prerenderedAt":153},["ShallowReactive",2],{"legal:/legal/privacy":3},{"id":4,"title":5,"body":6,"description":142,"effectiveAt":143,"extension":144,"meta":145,"navigation":146,"order":147,"path":148,"seo":149,"standfirst":150,"stem":151,"__hash__":152},"legal/legal/privacy.md","Privacy",{"type":7,"value":8,"toc":130},"minimark",[9,19,22,27,30,33,37,49,55,59,62,68,74,80,83,87,90,94,97,100,104,107,113,116,120,123,127],[10,11,12,13,18],"p",{},"Unpolished is published by Eraldo Federico Acchiappati, who is the data\ncontroller for this site and the person to write to through the\n",[14,15,17],"a",{"href":16},"/contact","contact form",".",[10,20,21],{},"This notice covers this website. It does not cover the other properties in the\nnetwork, which publish their own, nor anything you reach by following a link\naway from here.",[23,24,26],"h2",{"id":25},"the-short-version","The short version",[10,28,29],{},"There is no account to make, no newsletter to join, and no comment box. The\nsite is a set of files served as pages, so on an ordinary visit there is\nnothing for us to collect and nowhere for us to put it.",[10,31,32],{},"Three measurement tools are wired into the site, and none of them load until\nyou accept them. Decline, or ignore the banner, and no analytics script is\nfetched, no analytics cookie is set, and nothing about your visit reaches\nGoogle, Microsoft, or Cloudflare from this page.",[23,34,36],{"id":35},"what-is-collected-without-your-consent","What is collected without your consent",[10,38,39,43,44,48],{},[40,41,42],"strong",{},"A consent record."," When you answer the cookie banner, your answer is stored\non your own device so the banner does not ask again. It never leaves your\nbrowser. ",[14,45,47],{"href":46},"/legal/cookies","Cookies"," sets out exactly what it holds.",[10,50,51,54],{},[40,52,53],{},"Server logs."," Reaching any website means your device tells the server that\nserves it where to send the page. The server records those requests in the\nordinary way a web server does: IP address, time, the page requested, and the\nbrowser string your device sent. Those logs exist to serve the site and to keep\nit standing up under abuse, on the legal basis of our legitimate interest in\noperating it, and we do not use them to build any picture of an individual\nreader. They are kept for up to 90 days, longer only while something is being\ninvestigated.",[23,56,58],{"id":57},"what-is-collected-once-you-accept","What is collected once you accept",[10,60,61],{},"Accepting turns on the three tools below. Each is separately switchable in the\ncookie settings, reachable from the footer of any page.",[10,63,64,67],{},[40,65,66],{},"Google Analytics 4",", run by Google. It records which pages were read, how\nthey were reached, roughly where in the world the reader was, and what sort of\ndevice was used. It sets cookies to recognise a returning browser across\nvisits. Google acts as our processor for this, and processes the data on its\nown infrastructure, which includes servers in the United States.",[10,69,70,73],{},[40,71,72],{},"Microsoft Clarity",", run by Microsoft. It records how a page was actually\nused: scrolling, clicks, and a replay of the pointer moving over the page,\naggregated into heatmaps. Microsoft acts as our processor, and processes the\ndata on its own infrastructure, which includes servers in the United States.",[10,75,76,79],{},[40,77,78],{},"Cloudflare Web Analytics",", run by Cloudflare. It counts page views and\nwhere they came from. It sets no cookie and builds no identifier for a\nreturning visitor. It is behind the same consent gate as the other two anyway,\nbecause a script that reports your visit to a third party is a script you\nshould get to refuse, cookie or no cookie.",[10,81,82],{},"The legal basis for all three is your consent, and consent is the whole of it.\nWithdraw it in the cookie settings and it stops applying from that moment. That\ndoes not undo what was already collected, which is a limit of consent rather\nthan a policy of ours.",[23,84,86],{"id":85},"sending-data-out-of-the-region","Sending data out of the region",[10,88,89],{},"Google and Microsoft both process this data in the United States among other\nplaces. Those transfers rest on the European Commission's standard contractual\nclauses together with the EU-US Data Privacy Framework. If that framework is\nstruck down again, the transfers rest on the clauses alone, and we will\nreconsider whether either tool is worth keeping.",[23,91,93],{"id":92},"how-long-it-is-kept","How long it is kept",[10,95,96],{},"The consent record: six months, then the banner asks again.",[10,98,99],{},"Analytics data: held by each provider under its own retention settings, not\nours. Google Analytics keeps event-level data for either 2 or 14 months,\ndepending on how the property is set. Microsoft Clarity and Cloudflare Web\nAnalytics keep what they gather for as long as their own service settings and\ndocumentation provide. Aggregated reports that identify nobody may outlast all\nof these.",[23,101,103],{"id":102},"your-rights","Your rights",[10,105,106],{},"If you are in the UK or the EEA, the law gives you the right to ask what we\nhold about you, to have it corrected, to have it deleted, to restrict or object\nto what we do with it, and to receive it in a portable form. You can withdraw\nconsent at any time without giving a reason, and refusing in the first place\ncosts you nothing here: the site reads exactly the same either way.",[10,108,109,110,112],{},"Write to us through the ",[14,111,17],{"href":16}," and we will answer within one\nmonth. In practice the honest answer to most such requests will be that we hold\nnothing tied to you by name, because we never asked for it. Where the data sits\nwith Google or Microsoft rather than with us, we will tell you so and point you\nat their own controls.",[10,114,115],{},"If you think we have handled this badly, you can complain to your national\nsupervisory authority. Ours is Luxembourg's National Commission for Data\nProtection, the CNPD, at cnpd.public.lu; you may also complain to the authority\nwhere you live. We would rather you told us first, but that is your call, not a\ncondition.",[23,117,119],{"id":118},"children","Children",[10,121,122],{},"Nothing here is aimed at children under 16, and we do not knowingly collect\nanything from them.",[23,124,126],{"id":125},"changes","Changes",[10,128,129],{},"We will change this notice when what the site does changes, and the date at the\ntop is the date the current version took effect. Every earlier version is in\nthe site's public commit history, so you can see what changed and when rather\nthan taking our word for it.",{"title":131,"searchDepth":132,"depth":132,"links":133},"",2,[134,135,136,137,138,139,140,141],{"id":25,"depth":132,"text":26},{"id":35,"depth":132,"text":36},{"id":57,"depth":132,"text":58},{"id":85,"depth":132,"text":86},{"id":92,"depth":132,"text":93},{"id":102,"depth":132,"text":103},{"id":118,"depth":132,"text":119},{"id":125,"depth":132,"text":126},"Unpolished is published by Eraldo Federico Acchiappati, who is the data\ncontroller for this site and the person to write to through the\ncontact form.","2026-08-21","md",{},true,1,"/legal/privacy",{"title":5,"description":142},"What this site collects, which is nothing at all until you say otherwise.","legal/privacy","ZgdcmHovYBwlEJkSTlwlcKDFSllgjViEVC2K1qQ2pfo",1787337786864]