Privacy, honestly

We collect your email so we can send you one issue a week. Everything else on this page is us explaining how little else there is.

The short version

We want your email address. That's it. That is the entire commercial ambition of this website's data collection. There is no shadow profile, no data broker, no "trusted partners" who are neither.

What we actually collect

• Your email, if you type it into a box and press the button. Plus which page you typed it on, because knowing which post earned the signup is the only analytics that matters to us.
• That you visited — page, referrer, UTM tags if you arrived with them, and a first-party cookie so two visits from you don't read as two people.
• Aggregate traffic stats — how many people landed, from where, on what kind of device. Google Analytics does this and sets its own cookies to do it. It tells us which posts are worth writing more of; it doesn't tell us who you are.
• Billing details, only if you buy something — and those go straight to the payment gateway. Card numbers never touch our servers. We couldn't leak them if we tried, which is the correct amount of ability to have.

What we don't do

• Sell or rent your data. To anyone. Ever. It's an email list, not an asset class.
• Run advertising trackers or third-party ad pixels.
• Email you daily. It's one issue a week, and the unsubscribe link is one click and works immediately — not "please allow 10 business days".

Who else touches it

Only the boring infrastructure that makes a website work. This is the complete list:

• ClickFunnels — stores the contact record, runs the page SDK that counts visits, and sends the emails. US-based.
• Netlify — serves these pages and keeps standard server logs, including your IP address, for a short window.
• Google Analytics — the aggregate traffic stats above. Sets its own cookies and receives your IP, which Google truncates.
• Google Fonts — the typefaces. Yes, this means Google sees a font request, and your IP with it.
• Google Workspace — our email. Write to us and the thread lives in Gmail.
• X (Twitter) — embedded posts inside articles load from X, so X sees that request. We don't control that; it's the price of quoting someone properly.
• Cloudflare — runs the DNS for this domain via Porkbun, so it resolves the lookup that gets you here.
• Porkbun — the registrar. Holds the domain, not your data.
• Stripe — the payment gateway behind the checkout. Only if you buy something, and only the card details, which it takes directly.

Nobody on that list gets your data for their own marketing.

Each of them runs on infrastructure of their own and uses their own subprocessors — a cloud host under one, a mail relay under another. We don't reprint those lists here, because every company above publishes its own and keeps it current, which is worth more to you than a stale copy of ours. Most of them are US companies, so your data does cross the Atlantic to reach them.

Your move

Want a copy of what we have, or want it deleted? Email hey@richsteinmetz.com and ask. A human reads it and does the thing. No ticket portal, no identity verification theatre for an email address we only have because you gave it to us.