Last updated 26 August 2026What we collect—and what we don’t

You can read guidance.fyi without an account. We use limited analytics to understand what readers find useful, and we collect your email address only when you ask for the newsletter.

Reading

No account, profile, paywall, or payment data.

Analytics

Google Analytics measures visits and interactions when enabled.

Newsletter

Resend stores a confirmed subscriber’s email and subscription activity.

Security

Our database stores keyed hashes—not raw email or IP addresses—for abuse controls.

We do not sell or rent personal data, and we do not use it to make lending, employment, or investment decisions about you.

Site delivery and analytics

Cloudflare serves the site and protects it from abuse. In doing that, Cloudflare may process request information such as your IP address, traffic-routing data, browser or system details, requested URLs, and security signals. See Cloudflare’s privacy policy.

When Google Analytics is enabled on the production site, it helps us understand aggregate readership: pages viewed, referring sites, approximate location, browser and device details, and interactions such as scrolling, outbound-link clicks, and site search. Google uses the IP address received with a request to derive approximate location and says that the address is discarded before it is logged. Do not enter personal information into site search.

Google Analytics uses first-party cookies including _ga and_ga_<container-id> to distinguish browsers and sessions. Google’s default expiry for these cookies is two years, although your browser settings or deletion can shorten that period. Event-level data is subject to the retention controls configured in our Analytics property; aggregate reports may be retained longer.

You can block or delete Analytics cookies in your browser. The summaries, search, source links, and newsletter form will still work. Learn more inGoogle’s data-collection documentationand cookie reference.

When you subscribe

We send your email address to Resend to deliver a confirmation message. Your address becomes a newsletter contact only after you confirm. Resend may store the address, subscription status, and delivery or marketing-interaction history needed to operate the mailing list. Resend may process this information in the United States and through its authorised subprocessors. See Resend’s privacy policyand subprocessor list.

The signup form uses Cloudflare Turnstile to distinguish people from automated traffic. Turnstile evaluates browser and network security signals and returns a short-lived result; Cloudflare says Turnstile does not access, store, or transmit the form entry itself. We send Cloudflare the connecting IP address when validating that result. See theTurnstile documentation.

Separately, a Cloudflare D1 security ledger stores keyed hashes derived from the email address, IP address, and confirmation nonce. These hashes are not the raw values and are used only to enforce one confirmation request per address every 15 minutes, ten valid attempts per IP each hour, and a one-use confirmation link valid for 24 hours. Rows become eligible for deletion when their window expires; cleanup runs during later signup activity.

Confirmed subscriber records stay in Resend while the newsletter relationship continues or as needed to honour an opt-out, resolve delivery problems, meet legal obligations, or protect the service. Every marketing brief will include an unsubscribe mechanism. Resend records the resulting subscription preference so future broadcasts can respect it.

Access, correction, deletion, and withdrawal

You may unsubscribe using the link in a newsletter. You may also ask what personal data we control about you, correct it, withdraw newsletter consent, or request deletion by emailinghello@guidance.fyi. We may need to verify that the address is yours before acting on a request. Some minimal records may be retained when needed to honour an unsubscribe or legal obligation.

Your browser controls cookies and local storage. The theme choice is stored only in your browser so the site can remember light or dark mode; it is not sent to us as a profile.

We may update this notice when the site’s services or data practices change. The date at the top will move when the change is material. Questions or privacy requests can be sent tohello@guidance.fyi.