Privacy Policy
Last updated: 2026-06-07
This explains what we collect, why, where it lives, and what you can do about it. The short version is that we collect very little, because we are a publication, not a platform that needs to know you.
What We Collect
- Your email address, when you join the list to receive the Almanac and the Climate Reading.
- Technical metadata captured automatically when you visit: your IP address, browser type, device type, and basic request data, logged by Vercel and Cloudflare.
- Anonymized usage, such as which pages get read, captured by PostHog in cookieless mode and tied only to a single visit, not to you.
That is the whole of it. We do not ask for your name, phone number, address, date of birth, or anything about your finances. There are no accounts in this version of the site, so there is no profile, no portfolio, no holdings, and nothing about your money. We could not tailor advice to you if we wanted to, because we do not know enough about you to try, which is by design.
We do not process payments, so we never see or store card or bank information.
Why We Collect It
To send you the Almanac and the Climate Reading, to keep the site running and secure, to fix things that break, and to learn which writing is worth reading. Nothing else.
We do not sell or share your data for advertising or marketing. We never will. The only outside parties who touch your data are the service providers below, who handle it only to run the site on our behalf.
Third-Party Services
- Vercel (United States): hosts and serves the site. Receives standard server logs, including IP addresses.
- Cloudflare (United States): provides DNS, content delivery, and security. Receives request metadata.
- Resend (United States): stores the mailing list and delivers the Almanac, the Climate Reading, and any account notices. Holds your email address and the contents of those messages.
- PostHog (United States): records anonymized page views and usage. We send no personally identifying information beyond what is technically needed to attribute an event to a single session.
The Climate Reading is computed from public economic data we fetch ourselves. Those data sources receive nothing about you.
Cookies
We set one strictly necessary security cookie and run analytics cookieless. The full account is in our Cookie Policy at /cookies.
Data Security
Everything is served over HTTPS. Access to our service-provider accounts is limited to named accounts with multi-factor authentication. We use commercially reasonable safeguards, and we cannot promise perfect security against every possible threat. Tell us at hey@17years.org if you think something is wrong.
Keeping and Deleting Your Data
Your email stays on the list until you leave. Every email we send carries an unsubscribe link, and one click removes you. You can also ask us to delete everything we hold about you by writing to hey@17years.org. Anonymized usage data, which cannot be traced back to you once you are gone, may be kept for product analytics.
Your Rights
Wherever you live, you have the right to access your data, to correct it, to have it erased, to receive it in a portable format, to restrict or object to how we use it, and to complain to a data protection authority. To use any of these, email hey@17years.org. We answer within 30 days and will not treat you differently for asking.
Regional Compliance
We aim to comply with the GDPR, the UK GDPR, the California Consumer Privacy Act, and Canada's PIPEDA. Your data may be processed in the United States and Canada. We do not sell personal data under any definition, including the CCPA's.
Children
This site is meant for adults and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
Changes
If we make a material change, for example when accounts or payments arrive in a later version, we will update the date above and, where it affects subscribers, say so by email.
Contact
All privacy questions and data requests go to hey@17years.org. We answer within 30 days, usually sooner.
Operator and corporate identity: 17 Years Media Ltd., a corporation organized under the laws of the Northwest Territories, Canada, operating as 17 Years. Contact: hey@17years.org.