Privacy Policy

This privacy policy explains what personal information this blog ("the site") collects, why it is collected, how it is used, and the choices you have. The site is operated by Anthony Eden ("I", "me"). If you have any questions, contact me at me@anthonyeden.com.

Information collected

The site only collects information you actively provide:

• Account details when you sign in. To leave a comment you sign in with Google, with GitHub, or with a passwordless email "magic link". Depending on the method, the site stores your display name, your email address, and an identifier from the sign-in provider.
• Comments. The text of any comment you post, which is displayed publicly on the site alongside your display name.
• Comment-notification subscriptions. If you opt in when commenting, your email address is used to notify you of new comments on that post. Every notification includes a one-click unsubscribe link.
• Access requests. If you request access to friends-only posts, the optional message you submit is stored so I can review it.

Cookies

The site sets a single first-party session cookie to keep you signed in and to protect against cross-site request forgery. It does not use advertising or third-party tracking cookies, and there are no analytics trackers.

How information is used

Your information is used only to operate the site, specifically to:

• authenticate you and keep you signed in;
• display your comments and attribute them to your display name;
• send the comment notifications you have opted in to; and
• review and respond to access requests.

Your information is never sold, rented, or used for advertising.

Third-party services

A small number of service providers process data on my behalf so the site can function:

• Google and GitHub — only if you choose to sign in with them, to verify your identity.
• An email delivery provider — to send magic-link sign-in emails and comment notifications.
• A hosting provider — which runs the site's servers and database and may process technical data such as IP addresses for the security and operation of the service.

How information is protected

Personal information — your name, email address, comment text, and access-request messages — is encrypted at rest. Traffic to and from the site is served over HTTPS. Sign-in magic links are single-use, expire quickly, and are stored only as a one-way hash.

Data retention

Your account and comments are kept while your account remains active or until you ask me to delete them. Expired magic-link tokens and handled requests are removed in the normal course of operating the site.

Your rights and choices

• Unsubscribe from comment notifications at any time using the link in any notification email.
• Access, correct, or delete your personal information, including your account and comments, by contacting me at me@anthonyeden.com.
• Withdraw consent by requesting deletion of your account; this removes your stored personal information and your comments.

Children

The site is not directed at children and does not knowingly collect personal information from children.

Changes to this policy

This policy may be updated from time to time. Any changes will be posted on this page with a revised "last updated" date above.

Contact

Questions or requests about your privacy can be sent to me@anthonyeden.com.