Privacy Policy

This policy describes what Iron Leaks does with personal information, written to match what the site actually does rather than what a template assumes. Iron Leaks is a WordPress publication with no advertising, no affiliate program and no commercial relationship with any brand, which removes most of the reasons a website collects data. Two things are collected, and nothing else.

What information is collected

Server access logs. Like nearly every web server, the one hosting Iron Leaks records each request it handles. A log line holds the IP address making the request, the browser user agent, the URL requested, the response code, the referring URL if the browser sends one, and a timestamp. It is a byproduct of serving pages, used for security, abuse prevention and diagnosing faults.

Anything you put in an email. If you write to [email protected], the message and your address sit in an inbox until dealt with. Nothing you send is added to a mailing list, because there is no mailing list.

There is no contact form, no comment system, no registration and no account of any kind here. Comments are disabled. The site does not ask for your name, location, payment details or health information, and has no way to collect them.

What is not collected

Iron Leaks runs no third-party analytics: no Google Analytics property, no Meta pixel, no advertising tag, no heatmap or session-recording script, no A/B testing tool. No ad network is present, so no behavioral profile is built and nothing is shared with ad platforms.

Cookies

Iron Leaks sets no cookies of its own for tracking, analytics or advertising.

WordPress may set a small number of strictly functional cookies during normal operation, for example when an administrator signs in to publish. Every major browser lets you block cookies, and the site works without them.

Third parties and the Google Fonts disclosure

One third party is involved in loading a page here. Iron Leaks loads its typefaces from Google Fonts, served from Google’s content delivery network. Because your browser requests those files directly from Google’s servers, Google receives your IP address and user agent for that request. That is unavoidable while the fonts are served this way, and it is disclosed here rather than buried.

The host is the other party involved: it operates the server and holds the access logs described above. Articles also link out to research papers and government pages, and once you follow one of those links the destination’s own privacy practices apply.

How long information is kept

Server access logs are retained for a short operational period, typically no more than 30 days, then rotated out and deleted by the host. They are not exported, aggregated into profiles, or used for marketing. Email is kept only as long as it is useful, and you can ask for a message to be deleted.

Your rights if you are in the EU or UK

Under the General Data Protection Regulation and the UK GDPR you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. You may also complain to your supervisory authority.

The lawful basis for keeping server logs is legitimate interest: running the site securely and diagnosing faults. The lawful basis for handling email is responding to the request you sent. In practice the only identifier held about a reader is an IP address in a short-lived log file, so an access or erasure request is answered by confirming that and, where the log still exists, removing the entries.

Your rights if you are in California

Under the California Consumer Privacy Act as amended by the CPRA, California residents have the right to know what personal information is collected and how it is used, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising those rights.

Iron Leaks does not sell or share personal information, and never has. There is no ad network, no data broker relationship and no cross-context behavioral advertising here, so there is nothing to opt out of. No sensitive personal information is collected.

Exercising your rights, children, and changes

To exercise any right above, email [email protected] and say what you want done. Email is the contact method for privacy requests; no postal address or phone number is published. You may be asked for enough detail, such as an approximate date and IP address, to identify the records at all.

Iron Leaks is written for adults, is not directed at children under 13, and does not knowingly collect personal information from them. If you believe a child has emailed the editorial inbox, write in and it will be deleted.

If this policy changes, the updated version is posted here and the last-reviewed date changes with it. Material changes are described in the text rather than slipped in, the same standard applied to corrections on how we research.