AIProofWatch stores your email, authentication sessions, chosen interests, alert consent, preferences, and delivery records. Signing in alone never subscribes you. Cloudflare Workers and D1 host production application data; Resend receives recipient addresses and email content only when explicitly enabled. GitHub Actions collects public source metadata and cannot read subscriber records. No advertising or third-party analytics are included.
Operational delivery attempts are retained for 30 days. A minimal per-event delivery ledger remains while your account exists to prevent duplicates and identify relevant corrections. Consent records remain until account deletion. Local captured mail is removed after seven days; unused subscription drafts expire after 24 hours. Public editorial history is retained.
Unsubscribe using any digest link without signing in. Manage interests and pause alerts in Preferences. Account deletion removes account, sessions, preferences, drafts for your address, and recipient delivery data. A keyed hash of an address may remain for unsubscribe, bounce, or complaint suppression; raw addresses are not stored in the suppression table. Provider copies follow the provider’s retention policy. Contact the operator through the contact address configured for your pilot; do not launch a public pilot until that address is provided.
Reader feedback stores the message, optional source URL, selected topic, status, and submission date privately for editorial review. The form does not request an email or reply address. Editors can delete feedback. Anti-spam counters use a short-lived hashed IP key, not a raw IP address in the feedback record. Please avoid personal or sensitive information.