What this site collects, and what it does not.

Subscribing stores an email address and the date it was submitted. It is used to send Decision Delta and nothing else. It is never sold, rented, traded or supplied to anyone for their own marketing.

Decision Delta is sent through an email service provider, which processes the address on Don Dodds’s instructions and records ordinary delivery information: whether a message was delivered, opened or clicked. That data shapes what gets written next. It is not used to build a profile of a reader and it is not combined with anything from elsewhere.

Every issue carries an unsubscribe link. Unsubscribing removes the address from the sending list. A record that the address unsubscribed is kept, because that is what stops it being added again by mistake.

Traffic is measured in aggregate: pages viewed, roughly where in the world the request came from, and which site linked here. It is measured without cookies and without cross-site tracking, so there is no advertising identifier, no retargeting pixel and no profile that follows a reader off this domain.

This site sets no advertising or analytics cookies, which is why it has no cookie banner. The absence of the banner is the policy, not an oversight.

Email sent to this site, including speaking and media inquiries, is read and answered by Don Dodds. It stays in his mailbox and in the records a business normally keeps for correspondence. It is not added to the newsletter list unless asked.

Three kinds of company touch this data because the site cannot run without them: the host that serves the pages, the email service provider that sends the Brief, and the analytics provider that counts visits. Each acts on instruction and none has permission to use the data for its own purposes. They are named in the summary at the foot of this page.

A subscribed address is kept until the subscriber unsubscribes or asks for it to be deleted. Aggregate traffic data is kept for two years. Correspondence is kept as long as it is useful to answer, and then it is not.

Anyone can ask what is held about them, ask for it to be corrected, ask for a copy, or ask for it to be deleted. Requests are answered within thirty days and there is no charge. Nothing has to be justified: a request to be forgotten is enough on its own.

Readers in the European Economic Area and the United Kingdom have these rights under the GDPR, along with the right to object to processing and to complain to a supervisory authority. Readers in California have comparable rights under the CCPA, including the right to know and to delete. This site does not sell personal information as either law defines it, and it has no mechanism to do so.

Nothing here is directed at children, and the site does not knowingly collect information from anyone under sixteen. If such information arrives, it is deleted.

The site is served over HTTPS. The subscriber list lives with the email provider under its own security controls rather than on this site. No system is beyond compromise, and no promise is made here that one is.

This policy will change when the site does. The date below is the date it last changed, and previous versions are available on request. Material changes are announced in the Brief rather than made quietly.

Privacy questions and requests go to privacy@dondodds.com.