Legal
Privacy Policy
What OCXLY Digital Media House collects when you use this site, why, for how long, and the choices you have.
Last updated
The short version
This site is built as static files and does not need to know who you are to show you a story. We do not run advertising trackers, we do not sell or share personal data, and the only personal information we hold is what you choose to send us through the newsletter or contact forms.
Who is responsible
OCXLY Digital Media House, part of OCXLY (Object Core eXperience Laboratory), is the controller for any personal data described here. Contact: hello@ocxly.com.
What we collect and why
Reading the site
Pages are served from a content delivery network. Like every web server, it receives your IP address, the page you requested, the time and basic browser information in order to deliver the page and protect the site from abuse. The network keeps short-lived technical logs for security and reliability. We do not use them to identify or profile readers.
Newsletter
If you subscribe to The OCXLY Signal we store your email address, the time you consented and the page you subscribed from. We send a confirmation email first and only add you once you confirm (double opt-in). We use the address solely to send the newsletter. You can unsubscribe with one click in any issue, after which the address is deleted from the active list.
Contact form
Messages sent through the contact form, including your name, email address and the message itself, are kept for as long as needed to respond and, for corrections, to document how we handled them. They are deleted within twelve months unless there is an ongoing reason to keep them.
Search
Search runs entirely in your browser against an index downloaded from this site. Your search terms are not sent to us. Recent searches are kept in your browser's local storage for your convenience and can be cleared from the search panel.
Cookies and local storage
We set no cookies. The site uses your browser's local storage only for interface preferences such as recent searches. See the Cookie Policy for details.
Embedded media
Videos are hosted on YouTube. Nothing from YouTube loads until you press play, at which point the video is loaded from YouTube's privacy-enhanced domain and YouTube's own privacy policy applies. Audio is served from this site or from our podcast host.
Who else receives data
Our hosting and content delivery provider processes technical data to serve the site. Our email service provider processes newsletter addresses on our instructions. We do not otherwise share personal data unless required by law.
Your rights
Depending on where you live you may have the right to access, correct, delete or export the personal data we hold about you, to object to or restrict processing, and to withdraw consent at any time. Email hello@ocxly.com and we will respond within one month. You may also complain to your local data protection authority.
Security
The site is served over HTTPS with a strict Content Security Policy and related headers. Form submissions are validated on the server, rate limited and forwarded over encrypted connections. Secrets are never placed in code delivered to browsers.
Children
The site is not directed at children under 16 and we do not knowingly collect their data.
Changes
When this policy changes we update the date at the top of the page. Material changes to how we handle newsletter data will be announced in the newsletter itself.