Privacy

Privacy policy

What I store about people who sign in to this site, and about people I send links to.

This site has no public sign-up. Only people I invite can sign in, to edit horizonfall.com or other projects of mine that share the same login. This page covers what I store about you if you're one of them. If you're just reading the site, only the section on cookies applies. If I sent you a link, read "Links I send" below.

What I store

When you sign in, I keep your email address, a display name if you choose one, the dates you accepted this policy, and a record of which pages you've edited and when. Sign-in works through a one-time link sent to your email, or through a Google account connected to yours. Either way I don't store a password.

Changing the address on your account

You can move your account to another email address from /account. A link goes to the new address and your old address is told it happened. Opening the link finishes the move. It is the same account afterwards, with the same history.

Signing in with Google

You can connect a Google account and sign in with that instead of waiting for a link in your email. Google tells me your email address and whether Google has verified it. That is all it tells me: no contacts, no calendar, nothing in your Drive. It is the same account here either way, and you can disconnect it again as long as you have another way in.

Connecting Google never creates an account. Nobody can sign up here, with Google or otherwise. It only adds a second way into an account I already invited.

Why

I store this so invited people can sign in and edit the site, and so I can tell who changed what and when. That second part matters once there's more than one editor. If a page breaks, the edit history says which change caused it.

Where it lives

Your data sits in Supabase, hosted in the London region. The site itself is served by Vercel. Both companies run the infrastructure; neither reads or uses your data beyond that.

Cookies

The only cookie this site sets is the one that keeps you signed in. It's strictly necessary: without it, the site has no way to know you're logged in from one page to the next. There's no cookie banner, because that's the only cookie and it isn't optional.

The site also runs Vercel Analytics and Speed Insights, which count visits and measure page speed. Both are cookieless. They can't identify you, and they don't connect to anything you've entered here.

Links I send

Some links in messages I send are made for that one message. They pass through horizonfall.com/go/ and then go straight on to the page. That tells me the copy I sent you was opened, and which of its links were followed. It doesn't tell me who opened it. If you forward my message, those clicks still count against the copy I sent you.

When one of these links is opened, I record the time, the country, the kind of browser (Chrome or Safari, for example), the website it was opened from, and which link it was. I don't record your IP address or your browser's full details. I don't set a cookie, and nothing is stored on your device. Link previews and email security scanners open links too. I record those the same way, so that I can tell them apart from a person.

I do this so I know whether what I send is useful to anyone, and when to follow up. Under UK data protection law this is a legitimate interest: keeping track of my own professional contacts.

I keep these records for as long as I keep you as a contact. If you'd rather I didn't record them, email me and I'll stop for every link I've sent you. The links will keep working. If you want everything I hold about you deleted, say so and I'll erase it, clicks included.

Your data, your control

Go to /account to see what's stored about you. From there you can download a copy of your data as a file, or delete your account.

Deleting your account

When you ask me to delete your account, it is switched off the same day. You can still sign in for thirty days, and the only thing you can do there is change your mind. After that it is deleted for good.

If any of my tools still holds something of yours, you erase that yourself first, and the deletion will not start until you have. That step is deliberate rather than automatic, because it cannot be undone.

How this site is run

This is a personal site and I run it as a hobby. I am one person, not a company. I keep no backups and there is no support desk, and I make no promises about uptime or about getting anything back once it is gone. Please don't keep anything here you can't afford to lose, and don't run anything that matters on it.

How all of this works is at my discretion, and I may change it, or close an account, if I think I need to.

Retention

I keep your data for as long as your account exists, nothing more. If you never delete it, it stays. Thirty days after you do, it's gone.

One thing stays behind. Every change here is written to a log I don't edit, and each entry carries the random id of the account that made it. Once your account is gone, nothing I hold connects that id to you.

Questions

Email aditya@horizonfall.com if anything here is unclear.