Effective date: April 8, 2026. Last revised: with each issue cycle.

What this policy covers

This privacy policy covers the Bulletin’s website at web4bulletin.com, the email addresses operated by the editorial team, and the newsletter that subscribers can opt into. It does not cover any of the third-party services the Bulletin links out to; readers who follow links to those services are subject to those services’ own privacy practices.

Data the site collects

The Bulletin’s site is statically generated and hosted on a static origin (Railway). The site itself does not collect analytics, does not embed third-party trackers, does not set persistent identifying cookies, and does not log individual reader behavior to a first-party analytics endpoint. The web host’s standard server logs collect IP address, request path, user agent, and timestamp for standard operational purposes — error detection, abuse mitigation, uptime monitoring — and are not used for editorial profiling.

Local storage

The site uses localStorage for two reader-facing features: the dark/light mode toggle (a single key recording the preferred theme) and the reading list (a small dictionary of saved article slugs). Both keys live in your browser only; they are never sent to the Bulletin’s servers. Clearing site data in your browser removes both immediately.

Cookies

The Bulletin’s static site sets no first-party cookies. The Pagefind search runtime, loaded on demand when a reader opens the search overlay, does not set cookies. Embedded fonts are served from Google Fonts, which may set transactional cookies under its own policy; the Bulletin loads the font CSS only and does not exchange identifying data with the font service.

Newsletter

The footer carries an email subscription form. The form’s working backend is a plain mailto: handoff to the Bulletin’s editorial address; messages arrive in the editorial mailbox and the address is added to the subscriber list by a contributor. The list lives in the editorial team’s working email system. It is not sold, shared, or sublease. It is used only to send the issue-closing email described on the Newsletter page. You can unsubscribe by replying to any issue email; we will remove your address within five business days.

Email addresses

The Bulletin operates several editorial addresses (editorial@, press@, corrections@, tips@, directory@, subscribe@). All of them are read by the editorial team. Messages sent to those addresses are stored in the editorial inbox under standard email retention; we do not separately ingest, index, or share their contents.

Third-party services

• Railway — the Bulletin’s static host. Server logs as described above.
• Google Fonts — the source for the typefaces the site uses. The font CSS is loaded over the public Google Fonts CDN. The Bulletin does not embed Google’s analytics or tag manager.
• Pagefind — a static-site search runtime loaded on-demand from the same origin as the site. Pagefind does not phone home; the search index is a static asset.

Your rights

The Bulletin does not maintain a profile of individual readers and therefore cannot, in most cases, identify a specific user’s data. The exceptions are: email addresses you have voluntarily provided to the newsletter or to one of the editorial addresses, and any locally-stored preferences you have set in your own browser. For the first, contact subscribe@web4bulletin.com to remove your address. For the second, clear your browser’s site data for web4bulletin.com.

Readers in the EU, the UK, and California have additional rights under GDPR, UK GDPR, and CCPA respectively. The Bulletin honors requests for access, correction, and deletion of personal data we hold — in practice, this is almost always a newsletter address. Address such requests to editorial@web4bulletin.com with the subject line “Data request”.

Children

The Bulletin’s editorial content is written for an adult audience. The publication does not knowingly solicit or process data from readers under the age of sixteen.

Changes to this policy

This policy is reviewed each issue cycle. Substantive changes are dated at the top of the page; the previous text is preserved in the corrections log on request.

Contact

The data controller for the purposes of GDPR is Lumenwhite Media Holdings Pte Ltd, the operating entity of The Web4 Bulletin, registered in Singapore. Privacy questions go to editorial@web4bulletin.com.