This Privacy Policy explains what information Inforapenny (the "Site") collects, how we use it, and the choices you have. We aim to collect the minimum data needed to publish editorial content and to deliver a newsletter to subscribers who ask for it.
What we collect
Email address. If you subscribe to the newsletter, we collect the email address you enter into the signup form. We use it only to send you the newsletter and to confirm your subscription.
Optional preference data. After subscribing, you may be asked a small number of optional questions about the topics you want to read. Any responses are stored alongside your subscriber record and used to tailor the content you receive. You may skip these questions.
Session cookie. The Site sets one HTTP-only session cookie named __session to remember whether you have already dismissed or completed the newsletter signup on this device. The cookie is signed with a server-side secret and is not readable by client-side JavaScript. It contains no personal information beyond an opaque state marker.
Server logs. Our hosting provider records standard request metadata (IP address, user agent, requested URL, timestamp) for reliability and security. Log retention is short, and Inforapenny does not use log data for advertising or profiling.
What we do not collect. We do not use third-party advertising trackers, analytics cookies, cross-site tracking pixels, or fingerprinting. We do not sell your data.
How we use your information
We use your email address to deliver the newsletter, to send transactional messages (such as a subscription confirmation), and to respond if you contact us. We use preference data, when you provide it, to select which posts to send you. We use aggregate, non-identifying request data to operate and improve the Site.
Service providers
We use a small set of third-party services to run Inforapenny. Each processes limited data on our behalf under its own privacy policy:
- Amazon Web Services (AWS): hosts our subscriber database (DynamoDB), post storage (S3), and sends confirmation emails on our behalf (SES). Data is stored in the AWS US East (N. Virginia) region.
- Netlify: hosts the Site and serves static assets. Netlify processes standard request logs.
- SEC EDGAR: source of the primary filings we cite. Inforapenny fetches SEC filings; the SEC does not receive information about you.
We do not share your email address with these providers for marketing purposes, and we do not use them to combine your data with third-party datasets.
Your choices
Unsubscribe. Every newsletter includes an unsubscribe link. Clicking it stops all newsletter email immediately.
Deletion. To request permanent deletion of your subscriber record, email us at hello@inforapenny.co from the address you subscribed with. We will process the request within a reasonable time and retain only the minimum data needed to prevent accidental re-subscription (typically a hashed record of the deleted email).
Access and correction. If you want a copy of the data associated with your subscriber record, or want to correct it, email us at the address above.
Cookies. You may block or delete the session cookie in your browser settings. The Site will still function.
U.S. state privacy rights
Residents of California, Colorado, Connecticut, Virginia, Utah, and other U.S. states with comprehensive privacy laws have the right to request access to, correction of, and deletion of their personal information, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise other rights, email the address above and identify yourself as a resident of a covered state.
International visitors
Inforapenny is operated from the United States. If you access the Site from another country, you understand that your data will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Site or subscribing to the newsletter, you consent to that transfer.
Children
Inforapenny is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us their information, email us and we will delete it.
Security
We keep the subscriber database and storage layer behind server-side credentials that are not exposed to the browser. We scope those credentials to the minimum permissions needed (read-only for the site runtime, separately-scoped write-only for the publishing pipeline). Perfect security cannot be guaranteed; if we ever learn of a breach that materially affects subscribers, we will notify affected users promptly.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be noted at the top of this page and, where reasonable, in the newsletter.
Contact
Questions about privacy at Inforapenny can be sent to hello@inforapenny.co.