Privacy policy
Effective October 27, 2026
HeyItsEdgar is Edgar’s personal website, based in San Luis Obispo, California. Edgar decides how the personal information described here is used. Questions or privacy requests: heyyy.its.edgars.email@gmail.com.
What we collect and why
Newsletter. If you opt in, we collect your email address, signup time, signup page, and the wording and version of your consent. We use this to provide the free monthly newsletter with good news and updates and to record your permission. Signup is optional; browsing and commenting do not subscribe you. The legal basis, where GDPR applies, is consent (Article 6(1)(a)).
Comments. We store your chosen display name, comment, associated page, submission time, moderation status, and accepted comment-terms version. Approved comments and names are public. We use this information to host and moderate discussions, relying on our legitimate interest in operating a community (Article 6(1)(f)). Do not include private or sensitive information in public comments.
Security and hosting. Our hosting providers process technical request information such as IP addresses, browser details, requested URLs and error logs to deliver and protect the site. The comment feature stores a daily one-way network hash, not your raw IP. Newsletter abuse protection uses a rotating network hash and short-lived request counters. Our basis is the legitimate interest in preventing abuse and keeping the site available.
Messages. If you email Edgar, your address and message are used to respond and handle your request. The basis is legitimate interests or steps requested before a contract, as appropriate.
Your newsletter choices
You can withdraw consent at any time using the unsubscribe page or by emailing Edgar. Withdrawal does not affect the lawfulness of earlier processing. There is no fee or account requirement. We do not sell the mailing list, send unrelated third-party marketing, or use newsletter signup to consent to anything else. An email-delivery service is not currently connected; signups are stored for the newsletter. This notice will be updated before a new delivery provider is introduced.
Cookies, storage, and third-party content
This site does not install advertising trackers or a third-party analytics service. Fonts are served from this website. If you choose to remember your comment display name, it is saved in local storage on your device. Uncheck that option or clear your browser’s site data to remove it. Site-owner authentication and hosting protections may use necessary cookies.
YouTube players load only after you click the play control. Playback connects to YouTube/Google and may process device information, IP addresses and cookies under Google’s privacy policy. Some video thumbnails and media cover images are loaded from external image hosts, which receive ordinary image-request information such as IP address and browser details. External links, including share buttons, take you to services with their own policies; opening a share link does not subscribe you here.
Who can access information
Edgar and service providers needed to host, secure and operate the site may process this information. Hosting is provided through OpenAI Sites and Cloudflare, including the site database. Email messages are handled through Edgar’s Gmail account. These providers may process information in the United States or other countries. Where GDPR requires safeguards for an international transfer, applicable provider arrangements and transfer safeguards must be in place; contact Edgar for information about the arrangements relevant to your data. Information may also be disclosed when legally required or necessary to protect rights and security.
How long it is kept
Newsletter records are kept while subscribed and removed from the active site database when you unsubscribe. Newsletter rate-limit counters expire after ten minutes and are purged on subsequent form requests. Comments remain while relevant to the published discussion unless removed; contact Edgar to request deletion. Correspondence is kept as needed to resolve the request and meet legal obligations. Hosting logs and backups follow the providers’ retention arrangements and may not disappear immediately when an active record is removed.
Your rights
Depending on your location and applicable law, you may request access, a copy, correction, deletion, restriction, portability, or object to processing. You may withdraw consent, submit a request through an authorized agent, and complain to your local data protection authority. For EU/EEA and UK requests, we aim to respond within one month, with any lawful extension explained. We may need proportionate information to verify a request; we do not require you to create an account.
California residents may have rights to know, correct, delete, limit certain sensitive-data uses, and opt out of sale or sharing, where the CCPA/CPRA applies. We do not sell personal information or share it for cross-context behavioral advertising, and do not use sensitive information to infer personal characteristics. Global Privacy Control does not require an additional opt-out from activities we do not conduct. We do not discriminate against people for exercising privacy rights. Other US state rights may apply; email Edgar to exercise them or appeal a decision.
Security, children, and changes
We use encrypted connections, restricted administrative access and data-minimizing controls, but no internet service can guarantee absolute security. The site and newsletter are intended for adults and are not directed at children under 16. If a child has submitted personal information, contact Edgar to request its removal. We do not use automated decision-making that produces legal or similarly significant effects. Changes to this policy will appear here with an updated effective date; material changes to newsletter purposes require an appropriate new choice.
For privacy questions or requests, email heyyy.its.edgars.email@gmail.com.