Privacy notice

The short version. The checker and the guides ask you for nothing and store nothing about you. This site sets no cookies at all. The only personal information Disclosed. ever holds is an email address — and only if you choose to type one into the optional box, having ticked what you want to hear about. You can have it removed at any time by replying to any email, or by writing to iain@disclosed.work.

Who is responsible

Disclosed. is run by Iain Brown, based in Portugal. For data-protection purposes he is the controller of the personal data described below, and the way to reach him about anything on this page is iain@disclosed.work.

The checker and the guides

The two-minute checker runs entirely inside your own browser. The answers you give it are never sent anywhere — not to Disclosed., not to anyone else — and nothing is written to your device. Close the tab and they are gone, which is the intended behaviour rather than a limitation. The guides and the research pages are ordinary pages that ask you for nothing.

This site sets no cookies of any kind. That is also why you have never seen a cookie banner here: there is nothing to consent to.

Visitor statistics

To see roughly how many people visit and which pages they read, the site uses Cloudflare Web Analytics. It is deliberately cookieless — it sets no cookies, does not fingerprint your device, does not build a profile of you and cannot follow you to other sites. It reports totals, not people. Cloudflare handles your IP address in the ordinary course of serving and counting the request; Disclosed. never sees it, and there is no way from these figures to identify any individual visitor.

If you give us your email address

There is an optional box on this site. Nothing is hidden behind it — the checker and every guide stay free and open whether you use it or not. It offers two separate ticks, and you may choose either, both, or neither.

• “Tell me when the law changes.” A short message when the transparency rules covered by this site actually change. That is the whole of it: not a newsletter, and not a message every time something is added here.
• “Tell me if Disclosed. ever offers something paid.” Everything here is free today and there is nothing waiting in the wings. But it would be wrong to take your address under one promise and quietly widen it later, so this is asked separately and in advance. Leave it unticked and you will never hear from us about anything paid — and ticking the first box does not tick this one.

The two are kept apart deliberately. Consent to one is not consent to the other, and neither will ever be read as standing for the other.

• What is stored: your email address, the date and time you gave it, which of the two ticks you chose, and the exact wording that was on the screen when you chose, in the language you saw it. The last two are kept so that it can always be shown precisely what you agreed to. No name is asked for, and you are welcome to use an address that does not contain yours.
• What it is never used for: anything else. Your address will not be sold, shared, rented or passed to anyone, and it will not be used to advertise other people's products.
• The legal basis is your consent, given separately for each tick, and you can withdraw either one at any moment without giving a reason and without losing the other.
• Where it is kept: in Cloudflare's storage (Cloudflare, Inc.), which also hosts this site. Cloudflare is a United States company and this storage replicates across its network, so your address may be held outside the EEA. Those transfers are covered by Cloudflare's data processing terms, which incorporate the European Commission's standard contractual clauses, and by its certification under the EU–US Data Privacy Framework. The emails themselves are sent from the iain@disclosed.work mailbox, which runs on Zoho Mail (Zoho Corporation). That mailbox sits on Zoho’s European data centres, so your address is not transferred outside the EEA.
• How long: until you ask to come off, or until the list is wound up — whichever comes first. It will not be kept "just in case".
• How to come off: reply to any email and say so, or write to iain@disclosed.work, naming either list or both. No form, no login, no reason needed. It is done by hand and the address is deleted.

Your rights

Under the GDPR you can ask to see what is held about you, to have it corrected or deleted, to restrict or object to how it is used, to receive a copy in a portable form, and to withdraw your consent at any time. Since the entire holding is one email address and a timestamp, most of those amount to the same thing in practice — and asking will get it done rather than merely acknowledged.

If you think any of this has been handled badly, you can complain to your national data-protection authority. In Portugal that is the Comissão Nacional de Proteção de Dados (CNPD).

Changes to this notice

If this notice changes, the date at the top changes with it. Nothing already collected will be put to a new purpose without asking you first.