Privacy Policy

Last updated: April 30, 2026.

Short version

We collect minimal reader data, run no third-party tracking, and don't share data with anyone. The site uses no cookies for advertising or analytics purposes. We don't have a Facebook pixel, a Google Analytics tag, or any third-party JavaScript that tracks you.

What we collect

• Server logs. Standard web-server logs include the IP address, user-agent string, and request URL. We retain these for 30 days for operational purposes (debugging, abuse investigation) and then delete them.
• Email addresses for subscribers. If you subscribe to the publication, we store your email address and subscription status. We use this to send you the publication's content; we don't share it with anyone.
• Email addresses in correspondence. If you email us at editor@ or corrections@, we keep the email correspondence in our mail server. We don't add you to any list without your explicit opt-in.

What we don't collect

• Cookies for tracking. The site sets no cookies for tracking purposes. Astro may set first-party cookies for technical operations only.
• Analytics. We don't run Google Analytics, Plausible, Fathom, or any similar third-party analytics service.
• Pixels. No Facebook pixel, no LinkedIn insight tag, no other marketing pixels.
• Cross-site tracking. We don't have any.
• Personal information beyond email. We don't ask for your name, age, location, or any other personal information.

How we use what we collect

Server logs are used for operational purposes only — debugging, abuse investigation, performance monitoring. We don't aggregate them into reader profiles or use them for marketing. Subscriber email addresses are used to send you the publication; they're not shared with anyone.

Third parties

The site is hosted on AWS. AWS sees the same server-log information we do (it's the underlying infrastructure). We don't share data with any third parties beyond what AWS sees in the normal operation of the hosting infrastructure.

Outbound links (to apps we cover, to citations, to research) are standard hyperlinks. Clicking them takes you to the third-party site, where their privacy policy applies. We don't run referral, tracking, or affiliate parameters on outbound links.

Your rights

If you're in a jurisdiction with data-rights legislation (GDPR in the EU, CCPA in California, similar laws elsewhere), you have rights to access, delete, and port your data. Email editor@whichapp.report to exercise these rights. We'll respond within the legally required timeframe.

Changes to this policy

If we change this privacy policy materially, we'll post the change here and document it in the changelog. The current policy has been in place since the publication's founding (September 2025) and reflects our deliberate choice not to participate in the surveillance-advertising model.