Legal
Privacy notice
A project about transparency should be transparent about its own website. This notice says what dd-sa.org collects, what it doesn't, and what your rights are — in plain English.
The short version: this site sets no cookies of its own, runs no analytics, and shows no advertising. It collects personal data in exactly two situations: when you submit a form, and when you choose to open the comments drawer on an essay. Everything else is ordinary web hosting.
Who is responsible
This website is operated by Ian R. Graham, the author of the DD&SA corpus, who is the data controller for any personal data collected through it. Contact: governance@dd-sa.org, or the contact form.
What is collected, and why
1. Forms (contact, subscribe, unsubscribe)
When you submit a form, the details you enter (typically your name, email address, and message) are relayed by Web3Forms, a form-delivery service, to the DD&SA email inbox. The lawful basis is your consent, given by submitting the form. The data is used only to reply to you or, if you subscribed, to send the newsletter — roughly one email a month. It is never sold, shared for marketing, or used for profiling. You can unsubscribe at any time via the unsubscribe page or by replying to any newsletter, and your address will be removed from the list.
2. Comments (essays and FAQ)
Essay pages offer a comments drawer powered by Disqus. Deliberately, Disqus does not load until you open the drawer — simply reading an essay sends nothing to Disqus. If you open the drawer or post a comment, Disqus processes your data under its own privacy policy, which may include cookies and tracking on their side. If you would rather not interact with Disqus, don't open the drawer; you can always send thoughts through the contact form instead.
3. Hosting
The site is served by Cloudflare Pages. Like virtually all web hosts, Cloudflare processes connection data (such as IP addresses) transiently to deliver pages and defend against attacks, under Cloudflare's privacy policy. This site has no access to, and keeps no record of, who visits it.
4. One page loads fonts from Google
The Stratification page loads a typeface from Google Fonts, which involves your browser requesting a file from Google's servers. No other page on this site does so.
What is not collected
No analytics scripts. No advertising or ad trackers. No cookies set by this site. No social-media pixels. No account system. The share links in the footer are plain links — nothing loads from X or Facebook unless you click through to them.
How long data is kept
Form emails are kept only as long as needed to deal with your message. The subscriber list holds your email address until you unsubscribe, after which it is deleted.
Your rights
Under UK data protection law (UK GDPR and the Data Protection Act 2018) you can ask what personal data is held about you, ask for it to be corrected or deleted, and withdraw consent at any time. Write to governance@dd-sa.org and it will be actioned. If you are unhappy with how a request is handled, you have the right to complain to the Information Commissioner's Office.
Changes
If the way this site handles data changes — for example, if privacy-respecting analytics are ever added — this notice will be updated first, with the date below revised.
Last updated: 11 July 2026.