The short version: what reaches us is what you send on purpose, plus the technical connection data every request on the web carries. Your IP address, your browser type, the time. No advertising, no profiling, nothing sold or shared.
Last updated: 13 October 2026
No advertising. No tracking pixels. No social media embeds, and no share buttons that load third-party code. No cookie banner, because there are no tracking cookies to banner about. The only thing stored on your device is your light/dark theme preference, in your own browser's local storage, where it never leaves your machine.
There is none today. We plan to add site analytics at some point, because knowing which pages help people is how the site improves. When that happens it will be privacy-friendly analytics: aggregated page counts, no cross-site profiles, no advertising networks, and nothing sold or shared. This page is updated before analytics goes live, not after, so what you are reading always describes what the site actually does.
If a page's own code fails while you are using the site, the browser sends one short fault report to this same server — what broke, on which page, plus the technical details every web request carries: your IP address and browser type. At most one report per problem. That is diagnostics, not profiling: no cookies, no cross-site following, no third parties. It exists so that a broken interaction is something we can fix, rather than something you simply suffered through.
Form submissions and fault reports are logged so that failures can be diagnosed and abuse blocked. The log lives outside the public web root, is rotated by size, and holds no more than it needs: the event, the details you supplied, and the IP that sent it. The detailed log is switched on for diagnostics and off otherwise; either way, if you would rather your details were removed from it, write to us through the contact page and it will happen.
This site loads two things from outside: fonts from Google Fonts and, on one page, a single image hosted by Unsplash. Your browser therefore talks to those two providers when pages load. No page URL, form data or identifier is sent to either of them beyond what a standard content request involves.
The Field Notes pages carry two plain share links, to LinkedIn and X. They are links, not widgets: no third-party code loads with the page, and nothing is sent to either network unless you click one. What the network receives on a click is the article's address, which is the same thing your browser sends when you follow any link anywhere. The click does not pass this site along as the referrer.
You are dealing with a Dutch business, so the GDPR applies in full. You can ask what is held about you, ask for a correction, or ask for deletion, and get an answer within a month — usually within days. One message through the contact page is enough; no portals, no verification hoops.
You may notice the mailbox address is not printed on this page, or anywhere on the site. That is deliberate. A bare address on a public page is scraped by harvesters within days and flooded with spam, which would bury the real messages, including yours. The contact form reaches the same mailbox, with rate limiting and a spam trap in front of it.
If this policy changes meaningfully, the date at the top moves. The practical promise does not: nothing is collected beyond what you deliberately send and the technical connection data described above. If analytics is ever added, this page describes it before it starts.