Privacy
Analytics
The site records cookieless, aggregate page analytics through Vercel Analytics, Vercel Speed Insights, and Umami. None of them sets a cookie or identifies you. They count views, referrers, and rough performance.
Comments
Some pages carry a discussion thread. Posting a comment stores the name you give, your email address, the comment text, and your IP address in a database Craig runs himself (a Waline server on Vercel, with the data in Neon). The email address is never shown publicly and is used only to notify you if Craig replies; no avatar service is contacted. Your region and browser details are not shown.
Every comment is held until Craig reads it, so nothing appears automatically. The comment form includes Cloudflare Turnstile, which screens for bots and processes the request under Cloudflare's own privacy policy. The form, and Turnstile with it, loads when you open a thread or when you scroll to a thread that already has comments; a page with no comments loads neither. Notification emails are sent through Proton Mail. There is no other filter and no advertising.
To have a comment and its stored details deleted, email hello@craigstoller.com. Deleting a comment removes its record. A backup copy of the comment database is refreshed quarterly and kept latest-only: each export replaces the previous one, so a deleted comment drops out of the backup within three months.
Newsletter
Slack Tide, the macro newsletter, has its own page: Slack Tide privacy.