Privacy policy

This policy explains what data Bushworker collects when you use the site, why, and who else sees it. It applies to bushworker.com and any subdomains. We try to keep it short and concrete. If anything is unclear, write to us via the contact page.

What we collect

For ordinary visits to the site, we collect aggregated, anonymous analytics: the page you viewed, the country your request came from, the referring site, the device and browser type. We do not collect your IP address, your name, your email, or anything that could be used to identify you personally. We use Plausible Analytics for this. Plausible is cookieless and does not track users across sites.

If you email us, we keep your email address and the contents of your message for as long as is reasonably needed to reply and to remember the context if you write again later. We do not add you to any mailing list from a contact email alone.

If you submit a scam report, a correction, or a tip, we treat it the same way as an email. We may publish anonymised details of patterns we see across reports, but we do not publish your name, your email, or anything else that identifies you, unless you ask us to.

What we do not collect

• No third-party advertising cookies.
• No fingerprinting or cross-site tracking.
• No data sale, no data brokers, no behavioural advertising audiences.
• No newsletter signup data is shared with other companies. If we ever launch a newsletter, it will be opt-in and the policy will update before any data is collected.

Third parties involved in running the site

• Vercel. Hosts the website itself. Receives standard server request data (URL, timestamp, IP, user agent) needed to serve the page. See Vercel’s privacy policy.
• Sanity. Stores the editorial content of the site (pillar pages, tools data). Does not receive visitor data. See Sanity’s privacy policy.
• Plausible Analytics. Cookieless analytics provider, hosted in the EU, does not store personal data. See Plausible’s privacy policy.

Your rights

If you have written to us and want a copy of the messages we hold from you, or want them deleted, write to the same address and we will action it. We aim to action requests within seven days. We do not need your government ID or any other proof to do this; the request coming from the same email address is enough.

If you are in the EU or the UK, you have rights under the GDPR including access, rectification, deletion, and portability. If you are in California, you have rights under the CCPA. We honour both regardless of where the request comes from.

Changes to this policy

If we change anything material on this page, we update the date below and, where the change affects what we collect, we note the change at the top of the page for at least 30 days. Minor wording fixes are made silently.