Skip to content
FIELDNOTES — home

Legal

Privacy policy

A description of what data the site processes, based on how it actually works.

Version 0.9 (draft pending operator details) · revised October 16, 2026

Draft document: some details have not yet been provided by the site owner

Missing: operator (legal entity); operator address; jurisdiction; data protection contact; subscriber data retention period. Until these details are provided, the document is not final and has not been legally reviewed.

Data controller

Operator: not provided: legal entity. Address: not provided: address. Jurisdiction: not provided: jurisdiction.

Contact for personal data questions: not provided: email.

This policy applies only to the FIELDNOTES website and its newsletter. It does not cover data processing in Variational services, which have their own documents.

In brief

  • You can read the site without registering; we do not ask for or store user accounts.
  • The site does not set cookies and does not use advertising trackers.
  • If you subscribe to the newsletter, we process your email address and the fact of your consent.
  • Your address is not shared for advertising, trading offers or any trading funnel.

What data is processed

When you read the site

The hosting provider that serves the site automatically receives technical request data: IP address, time, the requested page address and browser type. This is necessary to deliver pages and protect against abuse. Hosting provider: not provided: provider name and location (determined at deployment).

When you submit the subscription form

To limit how often the form can be submitted, the server temporarily counts attempts from a single IP address and for a single email address. It uses cryptographic hashes of these values rather than the values themselves; the records are deleted automatically after 10–60 minutes. Email addresses are not written to server logs.

Analytics

Analytics is disabled by default. If the owner enables anonymized visit statistics (Plausible), they will run without cookies and without storing data in the browser; search queries, email addresses and tokens are not sent to it. This change will be noted here and in the cookie policy.

Newsletter

What data: your email address, a record of consent, the date and technical details of the subscription confirmation (recorded by the newsletter service), and subscription status.

Purpose: only to send emails about new publications and significant corrections. The emails contain no promo codes or offers to open an account.

Legal basis: your consent, which you give with a separate checkbox in the form. Consent to the newsletter is not tied to any other consent.

Double opt-in: after you submit the form, you receive an email with a link. Until you click it, the subscription is not active and no issues are sent.

Unsubscribing: every email includes an unsubscribe link — it takes effect immediately, without signing in to an account.

Who receives the data

  • Brevo — the newsletter service: stores subscriber addresses, sends confirmation emails and issues, and processes unsubscribes. Brevo privacy policy.
  • The site’s hosting provider — technical request data (see above).
  • If Upstash Redis storage is used for rate limiting, it holds only hashes of IP addresses and email addresses, for a short time.

We do not sell data and do not share it with Variational or third parties for marketing.

Retention periods

A subscriber’s address is kept while the subscription is active and then for the following period: not provided: retention period after unsubscribing (set by the operator). Unconfirmed subscription requests are deleted according to the newsletter service’s rules. Rate-limiting hashes are deleted automatically after 10–60 minutes.

Your rights

At any time, you can:

  • unsubscribe using the link in any email — this stops issues from being sent immediately;
  • ask what data about you is stored;
  • request that your address be corrected or deleted entirely from the newsletter service’s database;
  • withdraw your consent — this does not affect the lawfulness of processing before withdrawal.

To make a request, write to not provided: data protection email from the address in question. The right to lodge a complaint with a supervisory authority depends on the operator’s jurisdiction: not provided: jurisdiction and supervisory authority.

Cookies and trackers

The site does not set cookies, does not write data to browser storage (localStorage, sessionStorage) and does not load third-party widgets, videos or advertising scripts. Fonts are served from our own server. A detailed list is in the cookie policy.

Changes to this policy

When we make a substantive change, we update the version and date of the document at the top of the page. If the change concerns the newsletter, subscribers will learn about it in the next email.