First-Party Cookies
The Umami Post sets no first-party cookies. Reader preferences and state are stored in your browser's localStorage, a mechanism that never leaves your device and is not transmitted to any server. The following features use it:
- Dark / light mode preference, stored under
umami-theme - Focus mode, stored under
umami-focus - Reading settings (font, size, spacing, width, background, ruler, auto-scroll), stored under
umami-rs-*keys - Global display settings (font, size, spacing, theme), stored under
umami-gs-*keys - Reading list, recipes and articles you save via the bookmark button, stored under
umami-reading-list - Ingredient checklist, which ingredients you have checked off on a recipe, stored under
umami-checklist-*keys (one per recipe) - Library reading positions, where you left off in a public-domain cookbook, stored under
umami-lib-pos-* - Library chapter completion, which chapters you have finished, stored under
umami-lib-completed-* - Library bookmarks and annotations, highlights and notes you add, stored under
umami-lib-bookmarks-*andumami-lib-annotations-*
All of this data lives entirely in your browser. Clearing your browser's local storage will erase it. We cannot access, view, or recover it.
Analytics
We use Umami as our primary site analytics. Umami is designed to be privacy-first: it collects no personally identifiable information, sets no cookies, and does not track visitors across sites or sessions. It records page views, referrer, browser type, and general country, in aggregate, never linked to an individual.
We also use Cloudflare Web Analytics as a secondary measurement tool. Like Umami, it is cookieless and privacy-preserving: it does not use fingerprinting, does not track visitors across sites, and does not build profiles of individual users. It reports aggregate page-view counts, referrers, and coarse geography derived from the same request metadata Cloudflare already processes to serve the site. Cloudflare’s handling of this data is governed by their privacy policy.
Comments
Article comment sections are powered by Cusdis. If you read an article without submitting a comment, Cusdis does not collect data about you. If you submit a comment, your name (as entered), comment text, and email address (optional) are sent to Cusdis's servers and are subject to Cusdis's privacy policy. Comments go live only after manual review.
Translation
We use a widget from GTranslate (a third-party service, not Google) to offer the site in nine languages. The widget script is loaded from cdn.gtranslate.net. GTranslate uses Google Translate as its translation engine, so when you select a language both GTranslate and Google are involved in processing the request.
GTranslate is likely to set a cookie to remember your selected language. If you do not interact with the language selector, no cookie is set. GTranslate's data practices are governed by their privacy policy; Google's by Google's privacy policy.
Fonts
Typefaces are loaded from Bunny Fonts, a privacy-friendly alternative to Google Fonts. Bunny Fonts does not log IP addresses, does not set cookies, and does not track users. Your browser requests font files directly from fonts.bunny.net, which sees your IP address as part of a standard HTTP request, the same as any web server you connect to.
The site's display settings offer 27 font choices. System fonts (Georgia, Arial, Verdana, etc.) require no network request. Web fonts (Inter, Merriweather, Roboto, Crimson Pro, Atkinson Hyperlegible, and others) are loaded from Bunny Fonts only when you select them, they are not downloaded until needed.
Hosting
The site is hosted on Cloudflare Pages. Cloudflare processes traffic as part of providing hosting and DDoS protection. Their infrastructure may log standard request metadata (IP address, user agent, page requested, timestamp) for security and operational purposes. We do not receive individually identifiable logs. Cloudflare's practices are governed by their privacy policy.
Contact Forms (Web3Forms)
All forms on this site, including contact, article pitches, letters, quote submissions, event submissions, timeline suggestions, book recommendations, library text suggestions, glossary term suggestions, trial suggestions, thought experiment suggestions, corrections, tips, and feedback, are processed by Web3Forms, a third-party form service. When you submit a form, your message is delivered directly to our editorial inbox. Web3Forms does not store your submission data after delivery. Forms use hCaptcha for spam protection, which processes limited data (browser, IP address) subject to hCaptcha's privacy policy.
Most forms allow anonymous submissions, name and email are optional unless otherwise marked. We do not log form submissions independently of the email delivery.
Glossary Tooltips and Navigation
Glossary term definitions appear as tooltips when you hover over terms in articles and library pages. The tooltip library (Tippy.js and Popper.js) is self-hosted on our servers, no requests are made to third-party services, no cookies are set, and no data is collected.
The site uses instant.page (self-hosted) to prefetch pages when you hover over a link, making navigation faster. This means your browser may request a page before you click on it. No data about prefetched pages is transmitted to us or any third party.
When navigating between pages, content is swapped without a full page reload (SPA-style navigation). Fetched pages are cached temporarily in your browser's memory and are cleared when you close the tab.
Offline / Progressive Web App
The site installs a service worker that caches pages for offline reading. This cache is stored locally in your browser. No data about your offline reading is transmitted anywhere.
Newsletter
Our newsletter is managed by Buttondown, a third-party newsletter platform. If you subscribe, Buttondown collects your email address and stores it on their servers. Buttondown does not track whether you open a newsletter or click links inside one, those features are disabled. Links in the newsletter include UTM parameters (e.g. ?utm_source=buttondown) so our site analytics can attribute traffic to the newsletter in aggregate; this does not identify you individually. Your data is governed by Buttondown's privacy policy.
We use your email address only to send the newsletter. We will never share it with advertisers or other third parties. Every newsletter includes an unsubscribe link; you can also use our contact form to be removed.
If you contact us through our contact form, we receive your address and message. We use this only to respond to you. We do not add you to any mailing list without your explicit request, and we do not share your email with third parties.
What We Do Not Do
- We do not use advertising networks or tracking pixels.
- We do not sell, license, or share reader data with any third party for commercial purposes.
- We do not require account creation to read anything on this site.
- We do not build profiles of individual readers.
Changes to This Policy
If our data practices change in any material way, we will update this page and note the date of the change at the bottom. We will not adopt practices that contradict the principles stated above without prominent disclosure.
Questions: our contact form
Last updated: April 20, 2026