Legal
Privacy Policy
Last updated: September 2026. This policy explains how we collect, use, and protect your information.
Room notes
1. Data We Collect
Data We Collect
We collect minimal data necessary to operate the journal and improve your experience:
• Email address (only when you subscribe to the newsletter)
• CAPTCHA verification tokens (to prevent spam)
• Comments, notes, and recordings you voluntarily submit
• Anonymous usage analytics (page views, scroll depth, time on page)
• Technical data: IP address, browser type, operating system, referrer
2. How We Use Your Data
How We Use Your Data
• To send journal dispatches (newsletter) — only with your explicit consent
• To verify you're human via CAPTCHA when submitting content
• To moderate submitted content for safety and quality
• To improve the site experience and fix bugs
• To comply with legal obligations
3. Data Sharing
Data Sharing
We do not sell your data. We share data only with:
• hCaptcha (CAPTCHA verification) — IP and token only
• OpenAI / Azure Content Safety (content moderation) — submitted text only
• Email provider (Resend) — email address for newsletter delivery
• Legal authorities when required by law
4. Data Retention
Data Retention
• Newsletter emails: Until you unsubscribe
• Comments/notes: Indefinitely (part of the public journal record)
• Analytics: 14 months (Google Analytics default)
• CAPTCHA tokens: 5 minutes (verification only)
• Server logs: 30 days
5. Your Rights
Your Rights
Under GDPR, CCPA, and similar regulations, you have the right to:
• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (newsletter unsubscribe link in every email)
To exercise these rights, contact us at ontact@oweniraoya.me
6. Security
Security
• All data transmitted over HTTPS/TLS 1.3
• CAPTCHA secrets stored server-side only
• Database credentials never exposed to frontend
• Content moderation runs server-side
• Regular dependency updates and security audits
• No sensitive data in client-side code
7. Children's Privacy
Children's Privacy
This is not directed at children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us immediately for deletion.
8. Changes to This Policy
Changes to This Policy
We may update this policy occasionally. Material changes will be announced on the journal page and via newsletter. Continued use after changes constitutes acceptance.
9. Contact
Contact
Questions about this policy or your data?
Email: contact@oweniraoya.me
GitHub: github.com/owenlovescoding