Privacy.
Draft, written from the data the site actually stores. It needs review by the farm, and a professional legal review, before the public domain serves it. It is not a claim of compliance with any particular law.
What this site stores
The contact form stores the name, the email address, and the message you type, with the time the note arrived. The harvest notes form stores the email address in lower case, the time you ticked the consent box, which form you used, and a random token kept only as a hash so a future unsubscribe link can be matched. Nothing else is asked for. There is no phone field, and no account to create on the public pages.
Why it is kept
A contact note is kept so the farm can read it. A reply, if there is one, is sent outside this website. A harvest-note address is kept so the farm can write later. Nothing is emailed yet. The details are not sold, and they are not used to build an advertising profile.
What is not stored
No payment details, because nothing is for sale. No address, no phone number, and no advertising or analytics profile. Server logs record requests for operational reasons and exclude credentials, tokens and message bodies.
How long it is kept
Contact notes and harvest-note addresses stay until the farm erases them, or until an address is removed from the list. No automatic deletion date is configured. The short-lived submission counter described below expires on its own, after about an hour.
Submission limits
Each form is counted against the network address, in a separate record, so it cannot be sent without limit. That record is not the email address. It is kept for about an hour.
A short-lived cookie
After the harvest-notes form is accepted, the browser keeps a cookie named rga_followed for ten minutes. It lets the next page say that the form was sent. It does not contain the email address.
Services that see a visit
The pages load Clerk so an invited operator can sign in. A public visit does not ask you to create an account. Clerk may receive a technical request, and may set a cookie, when its script loads. That is for sign-in, not for advertising. The records themselves sit in a Postgres database. The current development database is hosted by Neon. A production database has not been created. If that host changes, this page should be updated before the public domain serves it. No analytics product is installed.
The farm does not send email yet. Ticking the consent box adds the address to a list that is not being mailed. You can remove an address at any time on the unsubscribe page, without waiting for a message to arrive.
Who can read a contact message
The website can add a message to the inbox and cannot read it back. Reading the inbox is a separate operator task, run with a database login that may only read messages, and only after the reason for the reading has been written to an append-only audit record. The script is scripts/read-contact-messages.ts. There is no page on this site that lists messages.
Deletion
Ask through the contact form and say which address should be erased. An operator runs scripts/erase-contact.ts, which deletes that address’s contact messages and subscriber row with a database login that exists only for erasure, and records that the erasure happened. Self-serve deletion arrives with accounts, which this site does not have yet.
Changes
If this page changes, the new version replaces this one here.