Privacy

I run this site and the newsletter myself. This page says what they collect, who handles it, and how to get your data deleted. Last updated: 2026-10-18.

Site analytics

I count visits with a small script I wrote, sent to PostHog. It sets no cookies and stores no identifier in your browser. That is why there is no consent banner.

It records:

• the page you viewed, and the page you came from without its query string (other than the utm_* tags below)
• your country, taken from Vercel's request headers
• coarse device, browser and operating system (for example Mobile, Safari, iOS)
• utm_* tags in the link, if it had any
• engagement: how far you scrolled, how long you stayed, post views and reads, and page speed measurements
• what you use: contact, project and share links, copying an email address or a code block, opening a photo, the writing and project filters, the theme toggle, and the stops on the Home journey
• pages that were not found, the names of errors the page hit, and what happens on the newsletter form and its confirm page

Your IP address is never sent to PostHog. A keyed pseudonym of it is used only to tell visitors apart within one day, and PostHog discards it. Your browser's user-agent string is passed on the same terms: PostHog uses it only as an input to that daily visitor hash and discards it. Nothing is tracked across days.

If your browser sends Global Privacy Control or Do Not Track, I honour it and the script sends nothing. To switch analytics off in one browser yourself, visit any page with ?notrack on the end. Add ?notrack=0 to switch it back on.

Your browser keeps a few preferences from this site, and none of them identify you: your light or dark choice, the Projects list view you picked (for that tab only), and the ?notrack switch if you used it.

Newsletter

When you subscribe, Resend stores your email address and the time you confirmed it. To confirm, you open the link in the email Resend sends to that address, then press the button on the page it opens, so nobody can sign you up by typing yours. If you never confirm, you are not added to the list, and the link expires after 48 hours.

Resend also records deliveries, opens and clicks for each email. My analytics count those under a random-looking id derived from your address. The address itself never goes to PostHog. Open counts are unreliable, because mail apps can load images for you or block them.

Every issue (the email I send for a post) has an unsubscribe link. To have your address and your email activity deleted, email me at surajmondem@gmail.com. I remove your contact from Resend, and I delete your id from my analytics together with the email events counted under it.

Resend keeps its own logs of the emails it sent, for example a confirmation email to someone who never confirmed, for its usual retention period. I can't delete those early.

Who handles your data

• Vercel hosts the site.
• PostHog stores the analytics.
• Resend stores the newsletter list and sends the emails.

Contact

Questions or deletion requests: surajmondem@gmail.com.