[THE GUARDRAIL]
AI risk · governance · security
Home / Privacy

Privacy at The Guardrail

What The Guardrail collects, what it does not, and which third parties see a request when you open a page here.

In short

  • No account, no login, no newsletter, so there is nothing about you to store.
  • We set no cookies of our own and operate no cross-site tracking.
  • Traffic measurement is cookieless and aggregate. It cannot identify you.
  • Exactly two third parties see a request when you open a page: our host and Google Fonts.

A publication about governance that handled personal data carelessly would be difficult to take seriously. This page describes what actually happens, in enough detail to check.

01What do we collect?

Nothing you type, because there is nothing to type. The Guardrail has no accounts, no comment form, no newsletter sign-up and no contact form. The only way to reach us is email, and an email you send is held in our mailbox for as long as the correspondence is useful.

02How is traffic measured?

With Cloudflare Web Analytics. It is cookieless: nothing is stored on your device and no profile is built across sites or visits. Cloudflare receives the page address, the referring address and coarse information about your browser and country, and reports it to us only in aggregate.

Because no cookie or comparable identifier is placed on your device, no consent is required under the ePrivacy Directive for this measurement, and we show no consent banner. That is a consequence of the choice of tooling, not a workaround.

03Who else sees a request?

  • Cloudflare, as host and network. It processes your IP address to deliver the page and to protect the site from abuse.
  • Google Fonts. Typefaces load from fonts.googleapis.com and fonts.gstatic.com, so Google receives your IP address and user-agent when a page loads. A content blocker stops that request and the site falls back to system fonts without breaking.

There is no additional analytics tag, no social embed, no video player, no chat widget and no advertising script.

04How does advertising work here?

Advertising is sold directly and served as plain HTML from this domain. An advertisement is text and a link, marked as such, written into the page at build time. There is no ad server, no auction, no script, no cookie and no tracking pixel. An advertiser cannot tell that you saw their advertisement, only that someone followed the link.

Links in advertising carry rel="sponsored nofollow" and lead to the advertiser's own site, which has its own policy and is outside our control.

If we ever connect a third-party advertising network, this page will be updated before the first advertisement is served, naming the provider and what it stores on your device. That has not happened.

05What are your rights?

Under the GDPR you may ask what personal data we hold about you, ask for it to be corrected or erased, and lodge a complaint with your national supervisory authority. In practice the only personal data we are likely to hold is an email you sent us. Write to editor@theguardrailreport.com and we will answer within 30 days.

Changes to this page

The date at the top changes whenever the substance does. Material changes are made before the practice they describe, not after it.