Your Privacy

What We Collect

By design, almost nothing. This is a largely static website. We do not require you to create an account, and we do not run advertising or third-party tracking scripts to build a profile of you.

Depending on how the site is hosted and protected, the following limited data may be processed:

• Basic server logs — our host may record standard technical information such as IP addresses and browser type, for security and to keep the site running. This is common to virtually all websites.
• Content delivery / security — if a service such as Cloudflare sits in front of the site, it processes traffic to protect against attacks and speed up delivery, under its own privacy terms.

Purchases

When you buy a book, the payment and delivery are handled by Gumroad, a third-party platform, under their privacy policy. They collect what is needed to process the sale (such as your email and payment details). We receive limited information about the sale but do not store your payment details ourselves. For cryptocurrency payments, no personal information is required.

Contacting Us

If you contact us by email, Signal, or PGP, we hold that correspondence in order to reply and, where relevant, to pursue a story. We treat source communications as confidential and protect them to the fullest extent within our power. See the Secure Contact page for how to reach us safely.

What We Do Not Do

• We do not sell, rent, or trade your personal information.
• We do not run advertising networks or behavioural trackers.
• We do not keep a marketing database of our readers. Readers who prefer not to share an email address can follow new work through our RSS feed instead — we collect nothing at our end. To be clear, RSS is a convenience for readers: it is not a source-protection measure. If you are contacting us with something sensitive, use the encrypted channels on the Secure Contact page.

Protecting Sources

Source protection is central to what we do. We will not publish information that identifies a confidential source without their consent, and we encourage sources to use encrypted channels. No system is perfect, and we are honest about that on our Secure Contact page. Your own precautions matter as much as ours.

Your Rights Under POPIA

Under South Africa's Protection of Personal Information Act, you have rights regarding any personal information we may hold, including the right to ask what we hold, to request correction, and to request deletion where appropriate. Because we deliberately hold so little, in most cases there is nothing to retrieve. To make a request, contact us via the Secure Contact page.

Changes

We may update this policy as the site grows or as our tools change. The date below reflects the most recent revision.

Last updated: 4 July 2026