Skip to content

Legal

Privacy Policy

Last updated: September 2026. This policy explains how we collect, use, and protect your information.

Room notes

1. Data We Collect

Data We Collect

We collect minimal data necessary to operate the journal and improve your experience:

• Email address (only when you subscribe to the newsletter)

• CAPTCHA verification tokens (to prevent spam)

• Comments, notes, and recordings you voluntarily submit

• Anonymous usage analytics (page views, scroll depth, time on page)

• Technical data: IP address, browser type, operating system, referrer

2. How We Use Your Data

How We Use Your Data

• To send journal dispatches (newsletter) — only with your explicit consent

• To verify you're human via CAPTCHA when submitting content

• To moderate submitted content for safety and quality

• To improve the site experience and fix bugs

• To comply with legal obligations

3. Data Sharing

Data Sharing

We do not sell your data. We share data only with:

• hCaptcha (CAPTCHA verification) — IP and token only

• OpenAI / Azure Content Safety (content moderation) — submitted text only

• Email provider (Resend) — email address for newsletter delivery

• Legal authorities when required by law

4. Data Retention

Data Retention

• Newsletter emails: Until you unsubscribe

• Comments/notes: Indefinitely (part of the public journal record)

• Analytics: 14 months (Google Analytics default)

• CAPTCHA tokens: 5 minutes (verification only)

• Server logs: 30 days

5. Your Rights

Your Rights

Under GDPR, CCPA, and similar regulations, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Request deletion of your data

• Restrict or object to processing

• Data portability

• Withdraw consent at any time (newsletter unsubscribe link in every email)

To exercise these rights, contact us at ontact@oweniraoya.me

6. Security

Security

• All data transmitted over HTTPS/TLS 1.3

• CAPTCHA secrets stored server-side only

• Database credentials never exposed to frontend

• Content moderation runs server-side

• Regular dependency updates and security audits

• No sensitive data in client-side code

7. Children's Privacy

Children's Privacy

This is not directed at children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us immediately for deletion.

8. Changes to This Policy

Changes to This Policy

We may update this policy occasionally. Material changes will be announced on the journal page and via newsletter. Continued use after changes constitutes acceptance.

9. Contact

Contact

Questions about this policy or your data?

Email: contact@oweniraoya.me

GitHub: github.com/owenlovescoding