The fine print, in large print

Privacy & terms

VERSION 2.0 · EFFECTIVE 04 NOV 2026 · APPLIES TO INFOSCOPE.WORK

TL;DR — You can read every brief on infoscope.work without an account, a cookie, or a profile. The only thing that ever asks for an identifier is the newsletter, and one click removes it. Nothing is sold, because there is nothing to sell.

No accounts

Reading never requires a login, an email, or a profile.

No ad trackers

No advertising cookies, no cross-site pixels, no fingerprinting.

Nothing sold

Reader data is not a product, and there is no data business here.

One-click exit

Unsubscribe works in a single click and deletes the address.

01 Who we are, and what this covers

infoscope.work is an independent editorial publication covering technology. It is run by a small editorial team rather than a media group, and it has no advertising business, no investor with a commercial interest in the subjects we cover, and no affiliate arrangements.

For the purposes of the EU and UK General Data Protection Regulation, the site operator is the data controller for the limited processing described here. For readers in mainland China, the same processing is described in line with the Personal Information Protection Law (PIPL). Questions, requests, and objections go to privacy@infoscope.work and are answered by a person, not a template.

This page covers infoscope.work and its newsletter. It does not cover third-party sites we link to: when you follow a citation to a paper, a datasheet, or another publication, their privacy terms apply from the moment you leave.

02 The data we actually process

There are exactly four categories, and none of them require you to identify yourself to read an article.

Aggregate traffic measurement. We count page views and approximate country from the request itself, without setting a cookie and without building a per-reader profile. This tells us which briefs are useful; it cannot tell us who you are.

Newsletter subscription. If, and only if, you submit the subscribe form, we store the email address and the date of consent. Nothing else — no name, no employer, no inferred interests.

Messages you send us. Contact and correction emails contain whatever you choose to write, including your address. They are kept as correspondence, not ingested into a marketing system.

Server logs. The hosting provider records IP address, timestamp, requested path, and user agent for security and abuse prevention. These logs are rotated after 30 days and are never joined to the newsletter list.

DataWhy we have itKept forShared with
Page viewsAggregate counts — no identifiers, no profiles13 monthsNot shared
Newsletter emailDelivering the daily brief you asked forUntil you unsubscribeEmail processor only
Contact messageAnswering your question or correction24 monthsNot shared
Server logsSecurity, abuse prevention, availability30 daysHosting provider

03 Cookies, storage, and analytics

The site sets no advertising cookies and loads no cross-site trackers, social pixels, session recorders, or heatmap scripts. There is no consent banner because there is nothing to consent to.

If you block all cookies, every article, comparison, and glossary entry still works. That is a deliberate constraint on how the site is built, not an accident.

Any future analytics must remain aggregate and cookieless. If that ever changes, this page will say so before the change ships, with the effective date recorded in the version history below.

Browser storage is used only for interface preferences, such as remembering an expanded panel during a single visit. It is not transmitted anywhere and is cleared when you clear site data.

04 The daily brief

The newsletter is the only thing on this site that asks for an identifier. Subscription is double opt-in: you submit the form, then confirm from the email we send. Unconfirmed addresses are deleted after seven days.

Every issue contains a single-click unsubscribe link. Using it deletes the address from the sending list immediately rather than marking it inactive, and no copy is retained for re-marketing.

Delivery is handled by an email service provider acting as a processor under a data-processing agreement. The provider sees the address and delivery metadata; it does not receive reading behaviour from the site, and it is not permitted to use the list for anything else.

We do not sell, rent, or trade the list, and we do not append third-party data to it. There are no sponsored sends and no advertising inserts.

05 Correspondence and corrections

When you write to editorial@, corrections@, press@, or privacy@infoscope.work, we keep the message and our reply so that a correction can be traced to the person who reported it and so that repeated questions can be answered consistently.

Correspondence is retained for 24 months, then deleted unless it forms part of a published correction record — in which case the correction stays public, but your email address is removed from the public note unless you ask to be credited.

We do not add correspondence addresses to the newsletter, and we do not use them for anything beyond answering you.

06 Legal bases for processing

Under the GDPR and UK GDPR we rely on three bases, and only three. Security and aggregate measurement rest on legitimate interests: keeping the site available and understanding which briefs are read, with the minimum data required. Newsletter delivery rests on consent, which you can withdraw at any time. Answering your message rests on the legitimate interest of responding to a request you initiated.

We do not rely on legitimate interests for advertising, because there is no advertising. We do not process special-category data, we do not build behavioural profiles, and we do not make automated decisions with legal effects about readers.

For readers in mainland China, processing follows PIPL: consent for the newsletter, and the minimum necessary scope for security logging, with the same retention limits described on this page.

07 Sharing, processors, and law enforcement

Data is shared with four categories of processor and nobody else: the hosting and CDN provider that serves the pages, the email provider that delivers the newsletter, an error-monitoring service that receives crash reports without article-level reading data, and the domain and DNS provider.

Each processor is bound by a data-processing agreement, may act only on our instructions, and is prohibited from using reader data for its own purposes. None of them is an advertising network, a data broker, or a social platform.

We do not sell data, and we do not share it for cross-context behavioural advertising — there is no advertising to share it with. If we ever receive a legally binding request for reader data, we will disclose only what is strictly required, and we will publish the fact of the request in an annual transparency note unless legally barred from doing so.

08 International transfers

The site is served from a global content network, so a request may be handled outside the country you are reading in. Where personal data leaves the EEA or the UK, transfers rely on Standard Contractual Clauses together with the provider's supplementary technical measures; where a jurisdiction holds an adequacy decision, that decision is the basis.

Because the data set is small — an email address at most — the practical exposure is limited to the delivery of a newsletter or the receipt of a message. We do not transfer any profiling data across borders, because none exists.

09 Retention, in one table

Retention is not 'as long as necessary', because that phrase means nothing in practice. These are the actual periods, and they are enforced by scheduled deletion rather than review.

RecordRetentionHow it ends
Server logs (IP, path, user agent)30 daysAutomatically rotated
Aggregate page-view counts13 monthsNo identifiers retained
Newsletter address (confirmed)Until unsubscribeDeleted on unsubscribe
Newsletter address (unconfirmed)7 daysDeleted if not confirmed
Contact & correction emails24 monthsDeleted unless part of a public correction
Public correction recordsPermanentEmail addresses redacted by default

10 Security

All traffic is served over TLS. Administrative access to the publishing system is limited to named editors, protected by multi-factor authentication, and reviewed when someone leaves the team. Publishing credentials are not shared with contributors.

No payment data is processed on this site, because there is nothing to buy. That removes the highest-risk category of personal data from the system entirely.

If a breach affecting reader data occurs, affected readers and the relevant supervisory authority are notified within 72 hours of confirmation, with a plain-language description of what was exposed and what we have changed.

11 Your rights

You have the right to ask what data we hold about you, to have it corrected, to have it deleted, to receive it in a portable format, to object to processing based on legitimate interests, and to withdraw newsletter consent at any time.

Write to privacy@infoscope.work with the request and, if relevant, the address you subscribed with. We respond within 30 days at the latest, and usually within a few business days. There is no fee and no form to fill in.

If you are unsatisfied with the response, you may complain to your local data-protection authority — in the EU, the authority of the country where you live or work; in the UK, the Information Commissioner's Office; in mainland China, the relevant cyberspace administration.

Access

Ask what we hold about you and receive a copy.

Rectification

Correct an address or a detail that is wrong.

Erasure

Have your email and correspondence deleted.

Portability

Receive the data you gave us in a readable format.

Objection

Object to processing based on legitimate interests.

Withdraw consent

Leave the newsletter in one click, at any time.

12 Children

The library is written for adults and older students and is not directed at children under 16. We do not knowingly collect personal data from children, and there is no mechanism on the site that invites a child to submit any.

If you believe a child has sent us personal data, write to privacy@infoscope.work and it will be deleted without further questions.

13 Terms of use

Reading is free. You may read, link to, quote, and cite briefs with attribution to infoscope.work and the named author. Quotation should not exceed the part needed to make your point, and must not distort the original conclusion.

Systematic reproduction, translation, or bulk text-and-data mining of the library requires written permission from editorial@infoscope.work. This includes using the archive to train a commercial model. Academic research using individual quotations is welcome and does not need permission.

Acceptable use: do not attempt to disrupt the site, scrape it at a rate that degrades service for others, misrepresent an InfoScope brief as commissioned by a third party, or use our name in a way that implies endorsement of a product.

The content is provided for information, not advice. It is offered 'as is', without warranties of any kind, and to the extent permitted by law the publisher is not liable for decisions taken on the basis of an article. Nothing here limits liability that cannot lawfully be limited.

These terms are governed by the laws applicable at the publisher's place of establishment, without prejudice to consumer protections you hold where you live.

14 Changes to this page

Material changes are announced on the site before they take effect, with a dated note explaining what changed and why. Minor wording edits are made in place and recorded in the version history.

Earlier versions are available on request from privacy@infoscope.work. We keep them because a privacy policy that changes silently is not worth reading.

  1. v2.004 Nov 2026

    Rewritten around four processing categories; retention table and rights section added.

  2. v1.212 Sep 2026

    Clarified that analytics is cookieless and that no consent banner is required.

  3. v1.002 Jun 2026

    First publication of the privacy and terms page.

Questions about your data?
Ask in plain language.

Access, deletion, correction, or simply “what do you have on me?” — every request is answered by a person within 30 days, usually much sooner.

privacy@infoscope.work Editorial standards