Privacy Policy

Last updated: 24 September 2026

This policy explains what personal data The Understory (theunderstory.info) collects when you visit the site, why, and what you can do about it.

Who we are

The Understory is operated by Releasy CORP, the data controller for the personal data described here. For any privacy question or request, write to support@releasy.xyz.

What we collect

Analytics. We use Cloudflare Web Analytics to count visits and see which pages are read, which devices and browsers are used, and which sites refer visitors. It does not set cookies or use your browser's storage, and Cloudflare states that it does not fingerprint or track individual visitors. We only see aggregate statistics.

Server logs. The site is hosted on Vercel. Like any web server, it records technical data about each request, such as your IP address, browser and the time of the visit, to deliver pages and keep the service secure.

Preferences stored on your device. The site may remember your light or dark display preference in your browser's local storage. This never leaves your device.

Newsletter. If you subscribe to "Letters from the road", we store your email address and the date you subscribed so we can write to you a few times a year. To unsubscribe, or to have your address deleted, email support@releasy.xyz. The form is protected by Cloudflare Turnstile, which checks that it is being filled in by a person rather than a bot; to do that, Cloudflare processes technical signals from your browser, such as your IP address. Turnstile only loads once you start filling in the form.

Editor accounts. Only authors who sign in to write for The Understory have accounts. Their email address and login session are handled by Supabase, which sets authentication cookies for signed-in users only. Readers never need an account.

Cookies

The only cookies on this site are the authentication cookies Supabase sets for editors who sign in (sb-*-auth-token), which last until they sign out. Readers get no cookies, and there is no cookie banner because there is nothing to consent to.

Legal basis

We process your email address for the newsletter on the basis of your consent, which you can withdraw at any time by unsubscribing. We process the limited technical data needed for analytics and server logs on the basis of our legitimate interest in running a secure, working site and understanding how it is used, and editor account data to provide the service those editors signed up for.

Who we share data with

We do not sell personal data or share it publicly. It is processed on our behalf by the service providers named above: Cloudflare (analytics and Turnstile), Vercel (hosting) and Supabase (database, newsletter subscribers and editor accounts). We never sell or share the newsletter list. Some of these providers may process data outside the European Economic Area, under safeguards such as the European Commission's Standard Contractual Clauses.

We may disclose information if required by law.

How long we keep it

Analytics are kept only as aggregate statistics. Server logs are kept by Vercel for a limited period for operational and security purposes. Newsletter addresses are kept while you are subscribed. If you unsubscribe, we keep a note that you did so we don't write to you again, unless you ask us to delete your address entirely. Editor account data is kept for as long as the account exists.

Your rights

Under the EU General Data Protection Regulation (GDPR) and similar laws, you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, email support@releasy.xyz. You also have the right to lodge a complaint with your local data protection authority.

Links to other sites

Our guides link to external sites that we do not operate. We are not responsible for their content or privacy practices, so please review their policies when you visit them.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.