Short, because there is not much to say.

Status, stated plainly: the subscription desk is built but not open. The forms post to this site's own endpoint and to nowhere else — no third-party form service, no tracker, never another company's server. Until the desk opens, that endpoint has nothing to write to: nothing you type is stored, nothing is sent, and the form will tell you so instead of thanking you. What follows describes the arrangement the forms are built for, and takes effect the day it opens.

If you subscribe to the Dispatch

We ask for an email address. We also record which door you came through — an essay, the Studio, the Editions shelf, the footer — because that is how we learn which writing is worth doing more of.

Subscription is double opt-in. Nothing is sent until you confirm from your own inbox, and every letter carries a one-click unsubscribe that works immediately rather than after a survey.

The list is held by our email provider. On our own side we keep a salted hash of the address rather than the address itself, along with the door, the language, the date, and the exact wording of the consent you agreed to. We keep the hash so that subscribing twice does not send you two letters, and so we can count without reading.

If you write to us

The Correspondence form goes to the house inbox and is read by a person. We keep the message for as long as the conversation is alive, and an anonymised row — the kind of enquiry, the budget band, the date — so we can count enquiries without keeping a file on the people who made them.

The Dispatch checkbox on that form is never pre-ticked and never bundled with sending. Writing to us is not consent to a newsletter.

Analytics

We measure page views, referrers and countries with a cookieless analytics tool. No cookies are set, no cross-site profile is built, and nothing is shared with an advertising network.

This is why there is no consent banner on the site. We did not find a clever way around the rule; we chose a tool that does not trigger it, which also happens to be the only choice consistent with a register that forbids interrupting a reader.

What we never do

• Sell, rent or share the list. Not with partners, not with an imprint, not with anybody.
• Set advertising or tracking cookies.
• Add you to the Dispatch because you did something else.
• Put personal data in a URL.

Your rights

You can ask what we hold, ask for it in a portable form, ask for it corrected, or ask for it deleted. Write to Correspondence and it is done within thirty days, usually the same week.

Deletion means deletion, including the hash and the event row, not a flag that hides you from a screen.

Where the data sits

The site is served from a global edge network. The email list is held by the email provider on servers inside the European Union. Enquiries sit in a mailbox. There is no third location and no data warehouse.

Changes

If this page changes in a way that affects what we do with your data, the change is announced in the Dispatch rather than quietly dated at the bottom of a page nobody revisits.

Questions about any of this: write to the house.