Privacy policy

Platform Changelog (platformchangelog.dev) is run by Christian Tichy, an individual, who decides how the information below is used. Questions and requests: [email protected].

The short version: no cookies for readers, no advertising trackers, no stored IP addresses, nothing sold. Details follow.

Reading the site

The site keeps its own small, first-party record of how it is used, so it can tell which pages and tools people find useful. For each page you view it records:

• the page address, the time, and how long the page was visible;
• the host name of the site that linked you here (for example google.com, never the full address) and any campaign tags in the link, such as utm_source=daily, on the first page of a visit;
• what you type in the search box and the filters you pick, with how many results they found;
• which outside links and share buttons you click (the destination host only), and whether you loaded older entries.

To count visits, your browser keeps a random identifier in session storage for the open tab; it is gone when you close the tab. To count unique visitors per day, the server combines your IP address and browser user agent with a random value that changes every day and computes a one-way hash. The daily value is deleted once a new day starts, so the hash cannot be traced back to you or linked to your visits on other days. Your IP address itself is never stored.

These records are kept for 180 days and then deleted. Known search engine crawlers are counted separately by name and page, never as visitors. The site does not use Google Analytics or any other third-party analytics script.

Your theme and color choices are saved in your own browser (local storage) and never sent to us. If you add a +1 to a report on the contact page, your browser keeps a random identifier so it counts only once; we store a hash of it.

The daily email

If you subscribe, we keep your email address, the page you subscribed from, and when you signed up, confirmed and unsubscribed. Nothing is sent until you click the confirmation link. Every email has a one-click unsubscribe link. After you unsubscribe we keep the address marked as unsubscribed so it is never emailed again; ask us and we will delete it completely. Emails are sent through Resend, which processes your address to deliver them.

Contact form and reports

A report contains the type of report, a title, your message, and optionally your name, your email address and the page it is about. We store it so it can be answered. The title, message, name (if given), page and your browser user agent are also filed as an issue in a private GitHub repository that we use to track work. Your email address is never filed there; it stays in our own database and is used only to reply. If you add a +1 with a name, that name appears on the issue. Reports are kept until you ask us to delete them.

Who processes data for us

• Cloudflare: domain, content delivery and security. Every request passes through it, including your IP address.
• Railway: hosts the site and its database, and keeps short-lived server logs.
• Resend: sends confirmation, daily and notification emails.
• GitHub: hosts the code and the scheduled jobs, and the issues described above.
• Anthropic (and, only if both of its models fail, a backup AI provider): writes the summaries from public feed text. No visitor or subscriber information is ever sent to an AI provider.

These providers are based in or process data in the United States. We do not sell or share personal information, and sponsors never receive any visitor data.

Cookies

Readers get no cookies. The only cookie the site sets is a sign-in cookie for its editor on the admin pages. Because nothing non-essential is stored on your device, there is no cookie banner.

Why this is allowed (GDPR and UK GDPR)

Analytics, security and answering reports rely on our legitimate interest in running and improving the site, using the privacy-preserving methods above. The daily email relies on your consent, which you give by confirming and withdraw by unsubscribing.

Your rights

You can ask to see, correct or delete what we hold about you, object to its use, or ask for a copy. Email [email protected] from the address concerned and we will answer within 30 days. Analytics records cannot be tied to a person, so there is nothing to look up for them. If you are in the EU or UK you may also complain to your data protection authority. California residents: we do not sell or share personal information, and you have the same rights to know and to delete.

Children

The site is written for professionals and is not directed at children under 16. We do not knowingly collect their information.

Changes

If this policy changes, the new version is posted here with a new effective date. Material changes will also be mentioned in the daily email. See also the terms of use and the methodology.