Privacy

Short, because there is not much to say. This site has no advertising network, no social pixels, and nothing that follows you anywhere else. Page views are counted, and the counting is done without cookies and without knowing who you are.

If you join the list

Your email address is stored, along with which page you signed up from and the date. That is all — no name, nothing else.

It is not sold or rented to advertisers or data brokers, and it is not handed to other companies for their own marketing. It may be handled by services used to run the site and send the email, and those services may change.

Every email carries a one-click unsubscribe link, which removes you immediately. Removing the stored address itself is a separate request, by email; the address to write to is at the foot of this page.

If you make an account

Signing in stores your email address and any practice history, so it can follow you to another device. There is no password, because there is no password to leak: signing in sends a one-time link that expires in twenty minutes.

This site stores a hash of the sign-in token, never the token itself. What is in the database is therefore not what signing in requires.

What stays in your browser

Anything interactive keeps your progress in your own browser's local storage, so it works without an account and without a network. Clearing your browser data clears it. Nothing in there is sent anywhere unless you are signed in and have asked it to sync.

One cookie exists, set only after you sign in, holding the session identifier. It is httpOnly, so scripts on the page cannot read it. There are no advertising or analytics cookies of any kind, which is why you have not been asked to accept any.

What gets counted

Page views are counted by Cloudflare Web Analytics. It records the address of the page, the site you arrived from, your country, and your browser. It does not set a cookie, does not store an identifier for you, and cannot recognize you on another site. So the site can tell that a page was read without being able to tell who read it.

Who else handles anything

Running a site needs a few services. Today they are:

• Cloudflare — serves the site, holds the database, and counts page views. Their server logs include IP addresses, as every web server's do.
• Resend — delivers the sign-in and list emails, so it processes the address a message is going to.

The typefaces came from Google Fonts once, so your browser announced itself to Google on every visit. This domain serves them now. That stopped.

These are the providers in use at the time of writing. They may be replaced by others doing the same jobs — an email provider in particular — without this page changing the day it happens.

If the site changes hands

If Sleightless is ever sold, merged or transferred, whatever is held here — including the mailing list and any accounts — would pass to the new owner as part of it. How a new owner handles it is theirs to describe, not something this page can settle in advance.

Asking for your data, or its removal

Email [email protected] and say what you want — a copy of everything held about you, or its deletion. There is no form to fill in and no account to make.

This page describes how things work today and may be updated as the site changes. The version on this page is the current one.