Privacy & contact.

Effective September 30, 2026. This policy covers plainnerd.com and its public API. PlainNerd is responsible for the information collected through this website. For editorial or privacy requests, email andrew.k@segunda.ai.

What you share with us

• Digest signup: your email address, signup date, and consent to receive the digest. We currently collect a launch list for the first issue; submitting the form does not send an email.
• Story submissions: your name, email address, title, description, article content, submission date, and moderation status. We use these to review your work and contact you about it. Your email is not displayed publicly.
• Comments: your chosen name, comment, associated article, submission date, and moderation status. Approved comments and their names are public. Please keep private information out of your comment.
• Messages: if you email us, we receive your address and the information you include. We use it to respond to your request.

Your account

When Google sign-in is available and you choose to use it, we receive your name, email address, profile photo URL, and Google account identifier. We store this profile and the provider credentials needed to manage the connection in Cloudflare D1. Provider access and refresh tokens are encrypted at rest by the application. We do not receive your Google password or request access to your inbox or files. Signing in does not subscribe you to the digest or publish your profile.

We use an essential, HTTP-only session cookie to keep you signed in, and temporary cookies to secure the sign-in process. Session records include your IP address and browser user agent to support account security. Sessions expire after seven days without renewal; using the site can renew them. Signing out revokes the current session. Google also processes your sign-in under its own privacy policy.

What stays on your device

Article bookmarks and saved writing drafts use your browser’s local storage. They are not sent to us unless you submit a contribution. You can remove them by clearing this site’s browser data. We do not use advertising cookies or install analytics trackers.

Hosting and security

Cloudflare hosts the website and stores submitted records in its D1 database. It processes technical request data, including IP addresses, to deliver the site, protect it from abuse, and provide operational logs. Our application uses IP-based rate limiting but does not save your IP address in the submission, comment, or signup tables. We do not intentionally log form contents or email addresses.

Our hosting and email providers may process information outside your country. Their infrastructure and retention practices also apply to technical logs and correspondence. See Cloudflare’s privacy policy. We may disclose information when required by law or necessary to protect the site and its readers.

Why we use your information

We use signup information with your consent. We use contributions, comments, and technical data to operate the journal, moderate submissions, prevent abuse, and respond to you. Where applicable, these activities rely on our legitimate interests in running a safe independent publication. We do not use automated decisions to publish your work.

How long we keep it

• Unpublished, pending or rejected submissions and comments are removed after 90 days.
• Accepted submission records, including the contributor contact address, are removed after 365 days. Published articles and approved comments remain in the journal unless removed through an editorial or privacy request.
• Launch-list signup records are removed after 365 days, or earlier when you ask to withdraw. We will update this notice if the digest begins and its subscription handling changes.
• Account profiles and linked identities remain until you request deletion. Expired sessions and temporary sign-in verification records are removed by the daily cleanup. Contact us to request account deletion or a copy of your account data.
• These limits are enforced by a daily cleanup of the live database. Deleted information may remain temporarily in the hosting provider’s recovery backups; D1’s recovery window can be up to 30 days.
• Privacy and editorial correspondence is kept only as long as needed to resolve the request and any related obligations. It is managed separately from the site database.

Your choices and requests

Email andrew.k@segunda.ai to withdraw your signup, request a copy of your information, correct it, or ask for deletion. Use the email associated with your submission when possible; for a comment, include its article URL and chosen name. We may ask for proportionate proof that the information is yours before changing or disclosing it.

Depending on where you live, you may also have rights to restrict or object to processing, receive your data in a portable format, and complain to your local data-protection authority. Withdrawing consent does not affect processing that already took place. We handle requests within the time required by applicable law.

Changes to this policy

We will update this page and its effective date when our practices change, including before introducing advertising trackers or a new use of signup information.