Policy
Privacy policy
We collect as little as we can get away with. This page says exactly what that is, rather than reserving broad rights we do not exercise.
Last updated July 25, 2026
Reading the site
You can read Informed Token without giving us anything. We do not require an account, and there is no advertising or third-party tracking network on the site.
Our hosting provider processes standard server request data, including IP address and browser user agent, as an unavoidable part of delivering pages and protecting against abuse.
Analytics
We use PostHog to understand which articles are read and how people arrive. It is configured deliberately narrowly: session recording is disabled and autocapture is off, so we do not record your screen and do not collect every click and keystroke.
We record only these events: a page view, how far down an article you scrolled, a share button click, a related-article click, and a newsletter signup submission. An anonymous identifier is stored in your browser’s local storage to distinguish returning visits. We do not use it to build advertising profiles and we do not sell or share it with data brokers.
The newsletter
If you subscribe, we store your email address, the page the signup came from, your topic preferences if you set any, your first name if you supply one, and the timestamps of your subscription, confirmation, and unsubscription.
We also store the IP address you subscribed from. This is a consent record: it is how we can show that a subscription was genuine if an address is ever disputed, and it is used for nothing else.
Subscription is double opt-in — you receive a confirmation email and nothing is sent until you click it. An unconfirmed address receives no further mail. The lawful basis is your consent, which you can withdraw at any time.
Every email includes a one-click unsubscribe link. When you unsubscribe we keep a minimal record of the address and the unsubscribe date so that we do not mail you again by mistake. If you would rather we erase it entirely, ask and we will.
Abuse prevention
Public forms are rate limited. To do that we store a short-lived counter keyed to the requester, which expires automatically. It is not used to identify you or linked to your reading.
Who processes your data
We use a small number of providers, each for one purpose. All are based in or process data in the United States, and personal data transferred to them is covered by their standard contractual protections.
- Vercel — hosting and content delivery.
- Neon — the database holding newsletter records.
- Resend — sending newsletter and confirmation email.
- PostHog — the analytics described above.
- Sentry — error monitoring, which may capture technical details of a failed request while diagnosing a fault.
- Sanity — where our articles are stored and edited. It holds no reader data.
We do not sell personal data, and we never have.
How long we keep things
Newsletter records are kept while you are subscribed. After you unsubscribe we retain the suppression record described above. Rate-limit counters expire within hours. Analytics data is retained according to our PostHog project settings and is not tied to your identity.
Your rights
Depending on where you live — including under the UK and EU GDPR and the CCPA — you may have the right to access the personal data we hold about you, correct it, delete it, receive a portable copy, object to processing, or withdraw consent.
Email contact@informedtoken.com and we will respond within one month. Exercising these rights costs nothing and we will not treat you differently for it. If you are unhappy with our response you can complain to your local data protection authority.
Children
Informed Token is written for a professional and general adult audience and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has subscribed, tell us and we will delete the record.
Changes
If we change what we collect or why, we will update this page and its date. Material changes affecting subscribers will be announced in the newsletter rather than made quietly.
Informed Token is the data controller. Questions go to contact@informedtoken.com, and our terms of use cover the rest of the relationship.