Privacy policy

What this site collects, which is as close to nothing as we can manage.

Last updated

NasNet is built and maintained by independent volunteers and operates under Holistic Resilience, a U.S.-registered nonprofit. In this policy, “we” and “us” mean NasNet and Holistic Resilience.

This policy covers joinnasnet.com and its mirrors. The software we publish is a separate matter: what each product does with data is described in that product’s own documentation.

People use this site under conditions where being identified carries real risk. So the design goal is not to handle your data carefully. It is to never hold it in the first place.

The short version

Reading this site requires nothing from you and leaves nothing with us.

  • No accounts, no registration, no login.
  • No analytics and no cookies unless you accept them in the banner.
  • No tracking pixels, no advertising.
  • No comments and no payments. The only form is the optional newsletter signup in the footer.
  • Apart from the analytics and the newsletter signup described below, nothing you do here is sent to us or to a third-party service.

What we collect

Almost nothing. The pages are static files. There is no record of who visited and no profile of you. If you accept analytics, we see aggregate counts of which pages are visited, but not who visited them.

We do not ask for your name, phone number or location. The one thing you can choose to give us is an email address, through the newsletter signup described below.

Newsletter

The footer of every page has an optional signup for NasNet news by email. Nothing on the site depends on it, and you can read everything without signing up.

If you sign up, we store three things: your email address, the language of the page you signed up from, and the date. We do not store your IP address or anything about your browser with it.

The list is run by NasNet and kept in a database on Cloudflare, the same provider that hosts the site. We use it only to send NasNet news, and we do not sell it, share it or combine it with anything else.

To keep automated signups out, the form runs Cloudflare Turnstile. It loads from Cloudflare only when you start using the form, and it checks your browser and connection, including your IP address, to decide whether you are a person. That check is processed by Cloudflare under its own privacy policy. Requests to the form are also rate limited by IP address, which is not saved.

An email address can identify you. If that matters to you, use an address that is not tied to your name. To be removed from the list, write to info@joinnasnet.com from that address and we will delete it.

Cookies and local storage

The site sets no cookies of its own. Google Analytics sets cookies only after you choose Accept in the cookie banner. If you choose Reject, or make no choice, none are set.

Two items are stored in your browser’s local storage: whether you chose the light or dark theme, and whether you accepted or rejected analytics. They stay on your device, are never sent anywhere, and disappear when you clear your browser data.

You can change your analytics choice at any time from the Cookie settings link in the footer.

Google Analytics

We use Google Analytics to learn which pages and guides people actually use, so we know what to improve. It runs in Google Consent Mode, and every kind of storage starts switched off.

Google’s analytics script loads on every page. Until you accept, it sets no cookies and stores no identifier, but it still sends Google basic signals without cookies, such as that a page was loaded, along with the technical details any web request carries, including your IP address.

If you accept, Google Analytics also sets cookies that let it count repeat visits and measure how people move through the site. Advertising storage and ad personalisation stay off either way, because the site shows no ads.

This data is processed by Google under Google’s privacy policy. We only see aggregate reports and do not use them to identify anyone.

Our hosting provider’s logs

The site is hosted on Cloudflare. Like any web host, Cloudflare processes the technical details of each request in order to serve the page and to protect the site from attack. Those details are typically the IP address, the time, the address requested, and the browser’s user-agent string.

That processing is Cloudflare’s, under Cloudflare’s privacy policy and retention periods, not ours. We do not export it, and do not use it to build any picture of individual visitors. Mirrors of this site may be hosted elsewhere, in which case that host’s logging applies instead.

Images and files served from Sanity

Our content is edited in Sanity, and some images and download files are served from Sanity’s CDN rather than from this domain. When a page contains one, your browser fetches it directly from that host, which therefore sees the request the same way any web server would.

We pass nothing about you to Sanity, and there is nothing to pass. The request carries no identifier we created.

Links, share buttons and embedded content

The site links out to Telegram, YouTube, GitHub and Instagram, and articles carry share buttons. A share button is an ordinary link: nothing is sent anywhere until you click it, and clicking it opens that service, where that service’s own policy applies.

Some pages may embed content hosted elsewhere, such as a video. Embedded content behaves as if you had visited the other site directly: that site can see the request, set its own cookies and run its own tracking, including linking it to an account you are signed in to there.

We are not responsible for the content or the privacy practices of any site we link to.

Fonts and scripts

Fonts are served from this domain, not from Google Fonts or any other font service, so loading them does not announce your visit to a third party. The only third-party scripts the site loads are Google’s analytics tag, described above, and Cloudflare’s Turnstile check, which loads only when you use the newsletter form. It loads no ad libraries.

What this site cannot hide

This is the part a privacy policy usually leaves out. Collecting nothing protects you from us; it does not protect you from the network between you and us.

Your connection to this site is encrypted, so the pages you read and the text on them are not visible in transit. But your internet provider, your network operator, and anyone monitoring your connection can still see that you contacted this domain, and when. No policy we write can change that.

If that matters to you, reach the site over a VPN or Tor, or through one of the addresses announced on the channels in the footer, and clear your browser history afterwards.

The editing tool at /admin

The site includes a content editor at /admin, used only by the people who write and publish this content. Signing in there uses a Sanity account and is governed by Sanity’s own privacy policy. It has nothing to do with visiting the site, and there is no reason for a reader ever to open it.

Requests for your data

If an authority, a company or an individual asks us to hand over information about visitors to this site, we have nothing to give them, because we never collected it. That is the entire point of the design. The analytics reports we can see are aggregate counts, not records of individual visitors. The one exception is the newsletter list, which holds the email addresses of people who chose to sign up.

Requests made to our hosting provider are a matter between that provider and the requester, and are outside our control. If we are ever compelled to change how this site works in a way that affects your privacy, we will say so on this page as far as we are permitted to.

Children

This site is not directed at children. It collects no personal information unless someone signs up for the newsletter, and the newsletter is not meant for children.

Changes to this policy

If the site changes in a way that affects this policy, we update this page and move the date at the top of it. Significant changes are also announced through the channels linked in the footer.

Contact

Questions about this policy, or about anything the site does that you think contradicts it, can go to info@joinnasnet.com, to our Telegram channel or to the project on GitHub. Both channels are linked in the footer.

If you email us, we receive your address and whatever you write. We use it only to reply, never add it to a list, and delete the conversation on request.

We will never ask you for a password, a recovery code or a payment, on any channel. Anyone doing so in our name is not us.