Privacy policy

Archaeology Teahouse is a small, independent publication. We built it to need as little of your data as possible, and this page describes all of it in plain language.

What we don't do

No advertising, no ad trackers, no analytics scripts, no social-media pixels, and no third-party code running in your browser. Reading this site does not follow you around the internet.

What the server sees

Like almost every website, our server keeps short-lived technical logs (your IP address, the pages requested, and your browser's self-description) to keep the site running and to spot abuse. These logs rotate automatically and are not used to profile readers. The site is served through Cloudflare, which processes the same technical data to protect against attacks; Cloudflare acts as our infrastructure provider, not as an advertiser.

Cookies

The public site sets no cookies. A session cookie exists only if you sign in to an account (currently that means the site keeper). It does one job — keeping you signed in — and expires when the session does.

Accounts and email

If you create an account, we store your email address and a securely hashed password, and we send you a one-time verification email. We do not send anything else unless you have asked for it, and we never share or sell email addresses.

Where data lives

The site is hosted in Germany (Hetzner, Falkenstein). Images are stored with Cloudflare R2 in Western Europe. Transactional email is delivered by Resend.

Your rights

Under the GDPR (EU) and POPIA (South Africa) you can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. For most readers the honest answer is "nothing at all." If you have an account and want it removed, get in touch via the contact page and it will be done.

Changes

When the newsletter launches, this policy will be updated first to describe exactly how subscriptions work, and the date at the top of this page will change.