What's collected
Most pages on arcnull.com are static and don't collect anything. The four exceptions:
1. Newsletter subscriptions
There is currently no signup form on the site — the newsletter isn't running yet. Addresses collected earlier are still stored (the address, where it was submitted from, and the timestamp) and are used only to send Arcnull updates and engineering notes — nothing else, no third-party syndication. Unsubscribe is one click in any email, or write to us and we'll remove the record.
2. Anonymous post reactions
When you tap a reaction button (👍 Useful, 💡 Insightful, 🧪 Tried it, 🔥 More like this) on a post, we record the reaction and a SHA-256 fingerprint of (server pepper + your IP + your User-Agent + today's UTC date). The fingerprint is used to enforce the "one reaction per visitor per post per day" rule — we cannot reverse it back to your IP. Reaction counts are public and visible to every reader.
3. Browser storage
One piece of localStorage data, client-side only:
arcnull:reacted:<slug>— the reaction you left on a post, so the buttons stay in the right state on return visits.
The site renders in a single light theme and no longer stores a theme preference.
We don't set any first-party tracking cookies, and we don't load third-party scripts that set cookies on our behalf.
4. Server access logs
Our backend (and our hosting provider) keep standard HTTP access logs for security and debugging — IP, path, status code, user agent, timestamp. These rotate on a short window (typically 14 days) and are not joined with any of the data above.
What we don't do
- No advertising, no ad networks, no remarketing pixels.
- No third-party analytics that profile you across sites (no GA, no Meta Pixel).
- No selling, renting, or trading any data.
- No "Sign in with Google/Apple/X" — the site doesn't have user accounts at all.
Comments via Giscus
Some posts have a comment section powered by Giscus, which posts comments to GitHub Discussions. If you choose to comment, you sign in with GitHub and Giscus + GitHub apply their own privacy terms to that interaction. You can read the post and the comment thread without signing in.
Your data, your call
For anything related to your data — deletion, export, questions — email [email protected]. A maintainer reads every message.
Changes
When this page meaningfully changes, the "last updated" date at the top changes with it. Material changes (new data flows, new third parties) are also called out in the engineering notes.