Privacy Policy

Information collected

Newsletter subscriptions

If you subscribe via the newsletter form, Joel Goodman collects your name and email address through Loops, the email service used to send letters. Subscriptions use double opt-in — you’ll get a confirmation email before you’re actually added to the list.

Website analytics

This site uses Umami, a self-hosted, privacy-first analytics tool that:

• Does not use cookies
• Does not collect personally identifying information
• Does not store your raw IP address — it’s used only to approximate your country, then discarded
• Runs on a server Joel Goodman controls directly — analytics data is never sent to a third-party analytics company

Collected data includes page views, referring site, approximate location (country level), device/browser type, and — if you arrived via a tagged link — campaign source information (UTM parameters). This data is aggregate and isn’t tied back to you individually.

Webmentions

This site accepts webmentions — a way for other sites to register that they’ve linked to or replied to a letter. If your site sends one, the mention (your site’s URL and the linked content) is displayed publicly alongside the letter it references.

How this information is used

• Sending the newsletter to subscribers
• Understanding which letters and pages get read, to inform what gets written next
• Basic security and abuse prevention

Third-party services

Two third-party services are involved in running this site:

• Loops: newsletter delivery and subscriber management
• Webmention.io: receiving and relaying webmentions from other sites

Website analytics (Umami) are not a third-party service — they run on infrastructure Joel Goodman operates directly. See “Website analytics” above.

Your rights

You can:

• Unsubscribe from the newsletter at any time, via the link in any email
• Request a copy of the data held about you
• Request correction or deletion of your data

To exercise any of these, email hello@joelgoodman.co.

Data retention

• Newsletter subscribers: until you unsubscribe or request deletion
• Analytics data: retained indefinitely on the self-hosted instance unless deleted on request — since it isn’t tied to an identifiable person, there’s no per-person record to expire

Legal basis (GDPR)

Processing is based on your consent (newsletter subscription, given via double opt-in) and legitimate interest (understanding site usage to improve the content). If you’re in the EU/EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority.

Children’s privacy

This site isn’t directed at children under 13, and no personal information is knowingly collected from them.

Changes to this policy

Updates will be posted on this page with a revised “Last updated” date.

Contact

Questions about this policy: hello@joelgoodman.co.