Privacy notice

What we collect

We don’t intentionally collect personal data when you browse: we set no advertising or cross-site trackers, and use only essential, first-party storage needed to run the site and remember your cookie choice (see below).

As with any website, our hosting may process standard technical data (such as your IP address and browser type) transiently to serve pages and keep the site secure. We don’t use it to build advertising or cross-site profiles.

Cookies & analytics

The site sets no third-party or advertising cookies. Your cookie preference is stored first-party in your browser (local storage) so the notice does not reappear once you choose.

Reading the blog sets no cookies, and nothing you read there is recorded against you. The only cookie the site itself sets is the sign-in cookie for the blog studio (below), and only for people who sign in there.

If we enable analytics, it will be privacy-first and cookieless: aggregate page views and events, with no cross-site cookies and no advertising profiles. Anything that would set a non-essential cookie loads only after you opt in via the notice, and you can decline.

The request-access form

If you submit the “Request access” form, your work email is used only to respond to your enquiry. We do not store it in a database or use it for marketing lists, and we do not share it with third parties for their own purposes.

The blog studio

Our blog posts are written in the blog studio, an invitation-only part of this site for people we invite to write for us. It is not open to visitors, and no visitor data is stored there.

For each person we invite, we store the name the invitation is for, the author name they write under, whether they can approve posts, when their invitation expires and when it was last used, and when it was issued and, if it was, revoked. We also store the posts they write and a record of who created, saved, submitted, approved, sent back or withdrew each post, and when, with any note the editor left and the wording checks shown to the author. For each sign-in we keep when it started and when it was last used. We keep only a one-way fingerprint of each invitation link and sign-in, never the link or sign-in itself.

This is stored by Supabase, our database provider, in its London (UK) region, and is used only to run the studio and publish the blog. Signing in sets one essential session cookie, sent only within the studio, which ends after 8 hours without use or when your browser session ends. Published posts and their author names are public on the blog.

Nothing here is deleted automatically: invitations (including expired and revoked ones), posts and their history are kept until we remove them. A sign-in stops working after 8 hours without use and its record is deleted later. To have your information removed, email us at the address below.

Your choices

Use the cookie notice to accept or decline non-essential storage. You can clear your choice by clearing this site’s data in your browser.

Contact

Questions about this notice? Email hello@cautiq.com.