Privacy Policy

Last updated: 24 September 2026

This policy explains what personal data The Understory (theunderstory.info) collects when you visit the site, why, and what you can do about it.

Who we are

The Understory is operated by Releasy CORP, the data controller for the personal data described here. For any privacy question or request, write to support@releasy.xyz.

What we collect

Analytics (only with your consent). If you accept analytics cookies in the banner shown on your first visit, we use Google Analytics 4 to understand how many people visit, which pages they read and roughly where they come from. Google Analytics sets cookies in your browser and collects information such as the pages you view, your approximate location (derived from your IP address), your device and browser type, and how you arrived at the site. We use this only in aggregate to improve the guides and the site. If you decline, or have not chosen yet, Google Analytics is not loaded and nothing is sent to Google.

Server logs. The site is hosted on Vercel. Like any web server, it records technical data about each request, such as your IP address, browser and the time of the visit, to deliver pages and keep the service secure.

Preferences stored on your device. The site remembers your analytics choice for up to a year, and may remember your light or dark display preference, in your browser's local storage. This never leaves your device.

Newsletter form. The "Letters from the road" form does not currently send or store your email address anywhere. If we start a mailing list, we will update this policy before collecting addresses.

Editor accounts. Only authors who sign in to write for The Understory have accounts. Their email address and login session are handled by Supabase, which sets authentication cookies for signed-in users only. Readers never need an account.

Cookies

You can change your analytics choice at any time with the "Cookie settings" link at the bottom of every page; declining removes the Google Analytics cookies. You can also block or delete cookies in your browser settings. Declining analytics does not affect how the site works. Google also offers a browser add-on that opts you out of Google Analytics on every site.

Legal basis

We process analytics data only on the basis of your consent, which you can withdraw at any time, and editor account data to provide the service those editors signed up for.

Who we share data with

We do not sell personal data or share it publicly. It is processed on our behalf by the service providers named above: Google (analytics), Vercel (hosting) and Supabase (database and editor accounts). Some of these providers may process data outside the European Economic Area, under safeguards such as the European Commission's Standard Contractual Clauses.

We may disclose information if required by law.

How long we keep it

Google Analytics data is retained according to the retention period set in our Analytics account, after which Google deletes it. Server logs are kept by Vercel for a limited period for operational and security purposes. Editor account data is kept for as long as the account exists.

Your rights

Under the EU General Data Protection Regulation (GDPR) and similar laws, you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, email support@releasy.xyz. You also have the right to lodge a complaint with your local data protection authority.

Links to other sites

Our guides link to external sites that we do not operate. We are not responsible for their content or privacy practices, so please review their policies when you visit them.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.