Privacy Policy
Last updated: March 5, 2026. Written in plain language because legal jargon is its own form of obfuscation.
What we collect
If you use the contact form, we collect your name, email address, and message. That's it. We use this information to reply to you. We don't add you to a mailing list, sell your information, or share it with third parties.
Analytics
Right now we run no analytics at all — no Plausible, no Fathom, nothing. The site ships zero third-party scripts, and its Content-Security-Policy blocks any from loading. If we ever add analytics, it will be a cookieless, privacy-respecting tool (such as Plausible or Fathom) that doesn't track you across sites or collect personal information, and we'll update this policy before turning it on. We will never use Google Analytics.
Affiliate links
The Kit page contains affiliate links. When you purchase a product through one of these links, we may earn a small commission at no additional cost to you. This is how we fund OPNorange without charging readers or accepting advertising.
No product pays to appear on the Kit page. Affiliate status does not influence our recommendations. Free and open-source tools appear alongside paid products. Every tool listed is something we use or would hand to a client. Affiliate links are disclosed on the Kit page itself.
Cookies
This site does not use tracking cookies. If we implement analytics, we will use a cookieless solution. No third-party cookies are set by this site. Ever.
Third parties
We do not sell, rent, or share your personal information with any third party for marketing purposes. The third parties involved in serving this site are named below; none set tracking cookies and none receive your data for advertising:
- Cloudflare serves the site and operates the CDN. Cloudflare may log standard access metadata (IP address, user agent, request path) for abuse prevention.
- Formspree (formspree.io) processes contact form submissions on our behalf. Your name, email, and message pass through Formspree to reach us.
The typefaces and the geographic data behind the Policy page maps are bundled with the site itself — nothing is fetched from a font CDN or any other third party.
If we add analytics in the future, we will use a privacy-respecting tool and update this policy before doing so.
On this device
The reading list, the “new since your last visit” marks, resume-reading, and the “I care about” beat picker are stored in this browser’s local storage. They never leave the device. There is no account and no cookie for them. The reading list page has a button that clears all four.
Data retention
Contact form submissions are retained only as long as needed to respond to your inquiry. We don't build profiles, we don't maintain dossiers, and we don't store information beyond its useful purpose. If you want your data deleted, email us and we'll do it.
Children
This site is not directed at children under 13. We do not knowingly collect information from anyone under 13.
Your rights
You have the right to know what data we hold about you (almost certainly nothing beyond a contact form submission), to request its deletion, and to opt out of any future communications. Contact us and we'll handle it promptly.
Changes
If we update this policy, we'll change the date at the top. We won't bury material changes in legalese. If something meaningful changes, we'll say so plainly.
The short version: We don't track you, we don't sell your data, we don't use cookies, and the only money we make from this site is through affiliate links that are clearly disclosed. A security company that doesn't respect your privacy isn't a security company.