What we store, in short: this site sets no advertising cookies and counts visits in aggregate, without storing IP addresses.
Release alerts are optional and only start after your click. Web push: when you tap "Notify me" and allow notifications in your browser, we store the push address your browser gives us (an endpoint and two keys, no name, no e-mail) for this site only. Push messages are delivered through your browser vendor's push service (for example Google, Apple or Mozilla), which sees that a message is sent but not a profile of you. You can turn alerts off with one click on this site or in your browser settings, and we delete the subscription then. E-mail: we use double opt-in. We store your address after you enter it, mark it as unconfirmed and send one confirmation mail; without your click on the link it is never used for alerts. Every alert mail has an unsubscribe link. We send a weekly digest of new articles, the release issue and big news. Clicks on links in the mails go through our own redirect and are counted anonymously per mail; opens are counted only if you ticked that box when signing up (then the mail contains a tiny image). Bounces and complaints remove the address automatically, unconfirmed sign-ups are deleted after 7 days, and anyone silent for 6 months gets one question and is otherwise removed. Mail is sent by our mail processor (Amazon SES or Cloudflare, under a data processing agreement) from a separate sender address per site. Ads in the newsletter are labelled "Advertisement". We do not pass addresses to sponsors or anyone else. Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.