Privacy Policy.

Automatic data. Like most sites, our servers and our third-party providers automatically log standard request information when you visit a page: IP address, user-agent string, referrer, requested URL, timestamp, and approximate region derived from the IP. Our own analytics deliberately store only a coarse subset of this — no raw IP, no full user-agent (see §4).

Account data. If you create a reader account, we collect your email address. If you sign in with Google, we also receive the name and profile picture associated with your Google account. We never receive or store your Google password. Account sign-in is passwordless — a one-time code by email — so we never hold a password for you either.

Reader activity. When you are signed in, we store the articles you like, the articles you bookmark, and the poll options you select, each linked to your account. This is what lets us show your saved list and remember which polls you have answered.

Cookies and similar technologies. We and our third-party partners use cookies and similar identifiers to keep you signed in, run analytics, and (when enabled) measure advertising. Specific partners are listed in §5.

Information you provide. If you subscribe to our newsletter, comment on an article, or contact us by email, we receive whatever you submit — typically your email address and the content of your message.

We do not ask for and we do not store any sensitive personal data (financial details, government IDs, health information).

A reader account is optional — you can read every article, browse, and search without one. An account exists only so you can like articles, save them for later, and vote in polls.

What an account stores: your email address; a display name and avatar if you signed in with Google; and your likes, bookmarks, and poll answers.

What stays private: like counts and poll results are shown publicly only as aggregate totals. Which option you personally voted for, and your bookmark list, are never shown to other readers — they are visible only to you.

Deleting your account: you can have your account and all associated data (email, likes, bookmarks, poll answers) permanently deleted at any time — see §7.

We keep a first-party record of page views to understand which articles readers value. It is deliberately minimal: no IP address is stored, no full user-agent — only a coarse client type (browser / bot / feed), an approximate country, the path, and an anonymous session identifier that rotates regularly. It is not tied to your account.

We also use Vercel Analytics for aggregate page-view counts and Web Vitals; it sets no cookies and does no cross-site tracking.

The site relies on the following third-party services:

• Supabase — our database, authentication, and media-storage provider. Stores published articles and hero images, and — for readers who create an account — the account record and activity described in §2.
• Resend — our email-delivery provider. Receives your email address to deliver sign-in codes and, if you subscribe, newsletters.
• Google — if you choose “Continue with Google”, Google authenticates you and shares your name, email, and profile picture with us under Google’s Privacy Policy.
• Google AdSense — where ads are enabled, Google may place cookies and use information about your visits to this and other sites to measure and personalise advertising. You can manage ad personalisation at google.com/settings/ads.
• Vercel — our hosting provider, and Vercel Analytics for aggregate metrics (see §4).
• Sentry — error monitoring, where enabled. Receives technical error reports (stack traces, browser/OS, the URL where an error occurred) so we can fix bugs. It is configured not to capture form contents.
• giscus / GitHub Discussions — powers article comments, if you choose to leave one. Subject to GitHub’s Privacy Statement.

Each partner receives only the information needed for its specific purpose. We do not sell personal information to anyone.

We use a small number of cookies: essential cookies that keep you signed in (set only after you create an account), and, where ads are enabled, advertising cookies set by Google AdSense.

You can disable cookies in your browser settings. Disabling essential cookies will prevent sign-in, but reading articles, browsing channels, and search will continue to work. For interest-based advertising specifically, you can opt out via the Network Advertising Initiative at optout.networkadvertising.org or the Digital Advertising Alliance at optout.aboutads.info.

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to our processing of it. For account holders this specifically includes the right to have your account and all associated data permanently deleted.

To exercise any of these rights, email us at privacy@oblaidish.com from the address on your account and we will respond within 30 days.