Privacy Policy

Information we collect

Newsletter email addresses

If you sign up for the newsletter, we store your email address, the source of the signup, a confirmation token, timestamps, and the IP address that submitted the form. The IP address is recorded at signup for abuse investigation; rate limiting itself is enforced transiently at submission time and does not read the stored value. Signup uses a double opt-in flow: we send a confirmation request, and only once you click the link in that email is your subscription confirmed and a welcome email sent. You can unsubscribe at any time using the link in every email or the unsubscribe page.

Comments

When you leave a comment we store the author name and email address you provide, the comment content, your browser's user-agent string, and a SHA-256 hash of your IP address (the raw IP is never stored). We also record moderation metadata such as an automated moderation score and status. Your email address is not published; it is used only for moderation and, if necessary, to contact you about your comment. Every comment is moderated before publication and may be rejected — see the Terms of Service.

Contact form

Messages sent through the contact form (your name, email address, subject, topic, and message) are delivered by email to the operator through our email provider. Contact messages are not stored in a database. For rate limiting, a hashed version of your IP address is held briefly in memory; the raw IP is never stored and is never included in the email.

Analytics

We use Vercel Analytics and Vercel Speed Insights for privacy-first, aggregate measurement — page views, referrers, device and browser type, approximate (country-level) location, and page-performance metrics. These are cookieless and do not build an advertising profile or track you across other websites. There is no cross-site user tracking on this site.

Error monitoring

We use Sentry to capture application errors so we can fix them. Error reporting runs in production only, and personally identifying information is scrubbed before events are sent: authorization and cookie headers are stripped; email addresses and recognised API-key patterns are redacted from error and exception messages; database connection strings are redacted from event messages; and sensitive query parameters (tokens, keys, passwords) are redacted from request URLs. Session replay is disabled.

Cookies and local storage

We do not set advertising or cross-site tracking cookies. Your browser'slocalStorageholds one item — your light/dark theme preference — so the site remembers it between visits. The operator-only admin area uses your browser'ssessionStorageto hold sign-in state; this applies only to the site operator, not to visitors.

Third-party services

To run the site we rely on a small number of processors:

• Vercel — hosting and the privacy-first analytics described above.
• Supabase — the PostgreSQL database where subscriber and comment records are stored, on infrastructure that encrypts data at rest.
• Resend — delivery of transactional emails (newsletter confirmation and welcome messages, and contact-form messages).
• Sentry — error monitoring, with the PII scrubbing described above.

The news feed links out to original third-party sources. Once you follow a link off this site, the destination's own privacy practices apply — we do not control them.

Data retention and your choices

You can unsubscribe from the newsletter at any time, which stops further emails. We do not currently run an automated data-retention or deletion schedule, and we do not operate a formal statutory data-request workflow (for example, a guaranteed GDPR or CCPA response process). We would rather state that plainly than promise a process we have not built. If you want your subscriber record or a comment deleted, email us and we will action reasonable requests.

Changes to this policy

If our data practices change, we will update this page and the “Last updated” date above.

Contact

Questions about privacy, or a deletion request? Email contact@wideriver.ai.