Privacy & participation

Comments and moderation

If engagement is enabled, Cloudflare Workers and D1 process your nickname, plain-text comment, submission time and optional email. Nicknames are unverified. Comments first enter a private human moderation queue. Only approved names, comment text and dates appear publicly. Email is private and optional, used only for a possible personal response. We do not send subscriptions or automated notifications.

Cloudflare Turnstile helps prevent abuse when you choose to submit. It receives connection and device data separately from optional Google Analytics. Our API uses short-lived keyed network rate-limit identifiers; it does not retain raw IP addresses in the application database or fingerprint readers.

Reactions

A random article-scoped browser token remembers your current reaction to the article and each approved comment for up to 180 days. You can change or remove each reaction independently. Deleting a comment also deletes its reactions. This is a best-effort browser limit, not verification of a unique person. It is independent of advertising and analytics. Blocking storage may make reactions unavailable.

Retention and your choices

Approved policy for activation: daily cleanup deletes pending, rejected and spam comments, and optional commenter email, at the next run after 30 days (normally within 31 days). Audit metadata is deleted at the next daily run after 90 days (normally within 91 days). Approved and hidden comments and reactions stay until explicitly deleted. Published articles and private drafts/revisions stay until the owner explicitly deletes them. Separate hourly cleanup removes expired abuse and retry records; their application lifetime is limited to 23 hours so a successful hourly run removes them within 24 hours, independently of daily cleanup. Cleanup failures or overdue runs require recovery and are shown in private administration. The owner checks this status daily; no proactive email alert is sent. A provider outage can delay physical deletion, so this is not an unconditional storage-expiry guarantee. Withdrawing an edition hides its engagement but does not erase moderation records. The owner manually manages encrypted private backup exports and deletes them after 30 days; there is no automatic export or deletion service. Provider-managed backups follow the applicable plan recovery window and cannot be individually purged by this site; restored databases must be purged before reopening engagement. Schedule activation and health verification are required before collecting submissions.

Reports flag a comment for human review and do not automatically hide it. To request access, correction or deletion, contact Mahmoud Khawaga, identifying the edition and comment. Do not put private information in public comments.

External video

Videos are ordinary links unless embedding rights have been checked. An optional Load video button connects to YouTube only after your choice; no video thumbnails load first. Privacy-enhanced embedding still transfers data. Analytics consent remains a separate choice.

Full website privacy policy · Cloudflare privacy policy · YouTube / Google privacy policy