AI Security GuruAI Security Guru

Privacy

Privacy notes

Template for Ryan to review. This is a draft for the site owner, not legal advice, and it is not a substitute for counsel.

AI Security Guru is a public website. You can read the stories, the briefs, and the feeds without an account.

Newsletter

If you subscribe, the site stores your email address, a confirmation token, an unsubscribe token, and the times you signed up, confirmed, or unsubscribed. The address stays pending until you open the confirmation link. Mail is sent through Resend, so Resend receives the address and the message in order to deliver it.

Signup attempts are rate-limited. The store keeps a hash of the requester address for that limit, not the raw address, and those rows are dropped after the window passes.

Unsubscribe is one click from the link in each email, including the one-click List-Unsubscribe header. That stops mail immediately. The address remains in the file as unsubscribed so a later signup has to confirm again and so I don't email it again by mistake.

To ask for the stored address to be erased, use the address on the contact page once it is published. Ryan should delete that row from the subscriber file. This draft does not add a separate erasure form.

Analytics

No analytics script is sent unless the server is configured with Plausible (PLAUSIBLE_DOMAIN) or Umami (UMAMI_SRC and UMAMI_WEBSITE_ID). If both are set, Plausible is the one that loads. Those products are used with their standard cookieless scripts. Ryan should confirm the plan he turns on. If neither variable is set, the pages do not load an analytics script.

Affiliates and sponsors

Some book links are affiliate links. A filled sponsor slot is labeled on the brief and in the email. Sponsors do not receive the subscriber list. Details are on the disclosure page.

Operator

Postal address: [add POSTAL_ADDRESS before relying on this page]. Privacy contact: [add CONTACT_EMAIL].

Privacy: AI Security Guru