Your privacy

Your name is public. Your email is private.

Your chosen display name appears with your comments, discussions, and published work. Your profile bio can appear on an author page. Your sign-in email is available only to you and the editors who manage accounts and submissions. It is never displayed on public profiles or conversation pages.

What we store

The journal stores your account preferences, bookmarks, submissions, comments, discussions, reply notifications, and newsletter preference. Editors also retain draft revisions and moderation reports. Published writing and public conversation can be read by people who have access to the journal.

Signing in

You can sign in with your journal email and password. We store a salted password hash, never the password itself. When connected, Google, Apple, participating institutions, and one-time email links provide other ways to sign in. If you choose a provider, it verifies your identity and shares your account identifier, email address, and available profile details with the journal. We retain the connection and encrypt provider access tokens. Your provider does not receive your journal password. A secure browser cookie keeps you signed in. Recovery codes are shown once and stored only as hashes. Resend sends account confirmation, password-reset, and one-time sign-in messages. We also retain limited security records to prevent repeated sign-in attempts.

Newsletters and notifications

Newsletters and emailed replies are separate, optional subscriptions. We send them only to confirmed email addresses. You can turn either off in account settings or use the unsubscribe link in an email. Reply notifications inside your account have a separate setting. Resend processes recipients and message contents to deliver email. Editors can see delivery records containing the recipient, subject, send time, provider reference, and any sending error. Account sign-in and recovery links are not stored in this delivery log.

Understanding our audience

We measure page visits, time with a page visible, referring websites, campaign labels, device categories, and external-link destinations. A random identifier in session storage groups pages within a visit. Traffic records contain no name, email address, full IP address, or personal browsing profile. Reports cover a rolling 90-day window; older traffic records are removed as new visits are recorded. Account information is not joined to anonymous visits. We honor browser Do Not Track and Global Privacy Control signals. Known bots and signed-in editorial staff are excluded. Limited hashed security records help prevent automated abuse.

The owner can view and export private account and subscription records, including email confirmation, subscription changes, and recent account-session dates. Existing reading counts are separate from anonymous traffic measurements.

Your choices

You can change your public name and bio, remove your own comments, and unsubscribe from newsletters. For an account deletion or data request, contact the editors using the contact form. They can also help with removal of a discussion you started.

Site storage and images

Articles and account records are stored in the publication’s database. Uploaded images are stored with the site. Your browser temporarily remembers which stories you have opened during a visit to avoid counting repeated refreshes. We do not use advertising trackers.