Skip to content
PressStart
Latest

Privacy Policy

This policy is a template. It describes how this site is built to behave, but it has not been reviewed by a lawyer for your jurisdiction. Before relying on it, have a qualified professional review it and update it to reflect where you operate, who your actual service providers are, and what your site does in practice.

Last updated: [DATE]

This policy explains what PressStart collects when you visit this website, why, how long it is kept, and what you can ask us to do about it. It is written to be read rather than to be impressive.

The short version: there are no accounts on this site, we never ask you for your name or email address, and our own analytics are designed so that we cannot identify you or follow you from one day to the next. The main exception is advertising, which is provided by a third party and is described in full below.

Who is responsible for your data

PressStart operates this website and is the data controller for the information described here. For any privacy question or request, including the rights listed further down, contact privacy@example.com.

What we collect

Our own analytics

We run first-party, cookieless analytics. No cookie is set for analytics purposes and nothing is stored in your browser. For each page view we record:

  • The path of the page you viewed, for example the address of this policy.
  • The referring domain, if you arrived from another site — the domain only, not the full address you came from.
  • A coarse device type: desktop, mobile or tablet.
  • The date and time of the request.
  • A visitor hash, described immediately below.

We do not store raw IP addresses, and we do not store user-agent strings. To estimate how many separate people visited a page rather than how many times it was loaded, we generate a one-way hash from your IP address, your user-agent string and a secret value known as a salt. The IP address and user-agent are used only in that calculation and are discarded immediately; only the resulting hash is written to our database.

The salt is rotated every day. Because the salt changes, the same visitor produces a completely different hash tomorrow, so the records cannot be linked across days to build a profile or a history. The hash is one-way and cannot be reversed to recover your IP address or identify you.

Google Analytics, if enabled

The site operator may optionally configure a Google Analytics measurement ID. If one is configured, Google Analytics loads on this site and collects data according to Google’s own practices, which may include cookies and identifiers. If no measurement ID is configured, Google Analytics does not load at all. Where consent is required in your jurisdiction, it is requested before these scripts run.

Advertising

This site carries advertising served by third parties, which may include Google and its AdSense service and their advertising partners.

These third parties may set and read their own cookies or similar identifiers in your browser in order to serve and measure advertising, including personalised advertising based on your prior visits to this and other websites. We do not control those cookies, we cannot read them, and the data they collect goes to the advertising provider rather than to us.

You can review and change how Google personalises the advertising you see, including turning personalisation off, through Google’s own advertising settings, which are reachable from the Privacy and Terms section of Google’s website. Industry opt-out tools operated by advertising trade bodies also allow you to opt out of personalised advertising from participating vendors. Opting out does not remove advertising; it makes it less relevant to you.

What we never collect

  • There are no user accounts and no registration on this site.
  • There is no newsletter and no mailing list.
  • There are no comments.
  • We do not collect names, email addresses, passwords, postal addresses or payment details from visitors.

If you choose to email one of the addresses published on this site, we will obviously have whatever you put in that email. We keep such correspondence only as long as it takes to deal with it.

Why we collect it, and our legal basis

We use analytics data for one purpose: to understand which articles people read, so we can decide what to write next and find pages that are broken or slow. It is never used to target individuals, and it is never sold or shared with data brokers.

Where the UK or EU General Data Protection Regulation applies, our legal basis for our own cookieless analytics is legitimate interests — specifically, our interest in understanding aggregate use of our own site. We consider this proportionate because the data is minimal, contains no direct identifiers, and is engineered so that it cannot be linked to an individual or followed across days.

For advertising cookies and for optional Google Analytics, the legal basis is consent where the applicable law requires it. Where a consent mechanism is presented, you can decline, and you can change your mind later.

Under the California Consumer Privacy Act, we do not sell personal information and we do not share it for cross-context behavioural advertising for money. Advertising providers on this site may process identifiers for personalised advertising, which some laws treat as sharing; the opt-out routes above apply.

How long we keep it

  • Analytics events are automatically deleted after 180 days. Aggregate counts derived from them, such as monthly totals per article, may be kept longer, but those contain no visitor-level records.
  • Daily salts are discarded when they rotate and are not archived, which means the day’s hashes cannot be recomputed even by us.
  • Server logs produced by our hosting provider are retained on that provider’s standard schedule, typically a small number of days, and are used only for security and fault diagnosis.
  • Email correspondence is kept only as long as needed to handle the matter it concerns.

Third parties

The organisations that may process data in connection with this site are:

  • Our hosting and infrastructure providers, which process requests in order to serve the site and keep short-lived operational logs.
  • Advertising providers, including Google, which serve advertising and may set their own cookies as described above.
  • Google Analytics, only if the site operator has configured a measurement ID.

Some of these providers operate internationally, which may involve transferring data outside your country. Where that happens under UK or EU rules, it relies on the transfer safeguards those providers put in place, such as standard contractual clauses.

Cookies

We set no cookies of our own for analytics or tracking. Any cookie set while you browse this site comes from a third party — an advertising provider, or Google Analytics if it has been enabled. A cookie may also be used to remember your consent choice so that you are not asked repeatedly.

You can block or delete cookies in your browser settings, and most browsers let you block third-party cookies specifically. Doing so will not stop you reading anything on this site.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct data that is inaccurate.
  • Erase your data.
  • Object to or restrict processing based on legitimate interests.
  • Opt out of the sale or sharing of personal information, and not be treated differently for doing so.
  • Complain to your data protection regulator.

To exercise any of these, write to privacy@example.com. Please be aware of a genuine limitation: because our analytics store only a salted hash that changes every day and we hold no identifier for you, we usually have no way to locate records relating to a specific person, and no way to verify that a given record is yours. In most cases there is simply nothing to retrieve or delete. For anything supplied by an advertising provider, requests are best made to that provider directly, and we will help you find the right route.

Children’s privacy

This site is intended for a general adult audience. It is not directed at children under 13, and we do not knowingly collect personal information from them. We have no accounts and no way to gather personal details from any visitor. If you believe a child has provided personal information to us, for instance by emailing us, contact privacy@example.com and we will delete it.

Security

The site is served over an encrypted connection. Analytics data is stored on infrastructure with restricted access, and the daily salt is held as a secret that is not exposed to the browser or included in any published data. No system is perfectly secure, but the most effective protection here is structural: we do not hold the kind of data that is worth stealing.

Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date at the top. Material changes will be noted on the page itself for a reasonable period so that returning visitors can see that something has changed. Continuing to use the site after an update means the current version applies to you.

Questions about any of this go to privacy@example.com.