Reading George Fox

Privacy Policy

Who we are

The sole author on this website is Bruce Steinberg. The website address is: https://www.readinggeorgefox.com.

What personal data we collect and why we collect it

Comments

This website has only accepted comments for a short time via Webmentions. That ability has been removed and comments are no longer accepted. When Webmentions were accepted, the URL and IP address of the originating post on your website was collected. This data was collected as part of your voluntary use of the comment system.

If you would like your comment removed, please contact me via the contact form. This website is a personal site, so it may take me a few days to respond to your request. Also, nightly backups are made and kept for 14 days. I will reply to your request upon removing the comment and 14 days after, I will no longer have any trace of it. However, you are responsible for removing the originating post on your website.

Contact forms

The Contact Form collects the name, email address, and comment that you enter as well as your website’s URL if you choose to include it. Your IP address is collected as well. This data is collected as part of your voluntary use of the contact form and is used to respond to your message. The only other use of your contact information would be to contact you in the case of a data breach. It is not used for any other purposes, including marketing purposes.

If you contact me to remove an earlier message or all your personal data, I will permanent delete the messages. Once again, 14 days after the deletion, all the backups containing your personal data will be purged.

Cookies

This website does set a cookie in your browser. The cookie contains no information and is not used to track your visits. I am researching how to stop setting this cookie entirely.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

This data is collected as a result of embedding content which is essential to the post containing it. As we do not have access to this data, you must contact the website from which the embedded content originated.

Micro.blog hosted sites

This website also contains links to my Micro.blog hosted websites. I do not collect any personal data on those sites. Their service collects your IP address. If you are signed into you Micro.blog account, they may collect more data. Contact help@micro.blog for any questions about your personal data that they collect.

Analytics

No analytics are used on this website.

Who we share your data with

When you posted a comment via a webmention (no form of comment is currently accepted) or use the contact form, your message is checked through an Automattic’s Akismet spam detection service. No other data is shared with any person, company, or service. This site also sends data to Automattic’s Jetpack service to prevent malicious login attempts. See below for more details.

How long we retain your data

If you have left a comment via webmention, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. If you have contacted me through the contact form, the message and its metadata are retained indefinitely as well. This is to retain a record of our correspondence and to contact you in the case of a data breach.

Contact me via the form and I will remove your comments and/or messages and their metadata.

What rights you have over your data

If you have left comments or sent messages through the contact form, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

When you posted a comment via a webmention (no form of comment is currently accepted) or use the contact form, your message is checked through Automattic’s Akismet spam detection service. See below for more details.

Your contact information

You may contact me, Bruce Steinberg, via the contact form.

Additional information

Webmentions

As via the Webmention standard, a link to the originating post of your comment is publicaly available.

How we protect your data

This website is set up to automatically install WordPress updates and will receive security updates the day they are issued by Automattic. I also regularly check and update the plugins as well. I may wait until the plugins are confirmed to be compatible with the version of WordPress that the site is running, unless the plugin release notes mention a security fix. In that case, I will update the plugin immediately.

This website also uses a two-factor authentication plugin and a plugin to obscure the login page. The only user accounts are an admin account and a writer account, both of which only I have access to. Both accounts are protected by a different long random password generated by a password manager program.

The Jetpack plugin is set to protect against brute force login attempts.

My web host DreamPress provides an SSL certificate and the website uses a plugin which ensures that your browser connects over https, unless you have manually disabled that ability in your browser.

What data breach procedures we have in place

If a data breach occurs, we will contact you via the contact info you have provided us.

What third parties we receive data from

This website does not receive data from any third parties.

Plugins

Akismet

This site collects personal data about visitors who used the contact form (or left a webmention comment in the past) and that data (IP address (for abuse), timestamp, name, email address, website, and message) is sent to Automattic’s Akismet anti-spam service. Automattic’s privacy policy can be found here.

Really Simple SSL

Really Simple SSL and Really Simple SSL add-ons do not process any personal identifiable information. You can find our privacy policy here.

Jetpack

Contact Form

Your submission data is stored in this site’s database and is emailed directly to me. This email will include the submitter’s IP address (for abuse prevention), timestamp, name, email address, website, and message. If you contact me to delete your messages, I will delete said email as well. See the Contact Form section above for more details.

Jetpack syncs post and post meta data associated with a user’s contact form submission to a shadow site on the WordPress.com servers. More details can be found here.

The contact form submission data (IP address, user agent, email address, site URL, and comment) is submitted to the Akismet service (also owned by Automattic) for spam checking. See the Akismet section above for more details.

Protect

If you do not attempt to log into this site no information is gathered. In other words, unless you are deliberately trying to sign in with permission, none of this applies to you. There are no links to the login page on the public portions of this site.

In order to check login activity and potentially block fraudulent attempts, the following information is used: attempting user’s IP address, attempting user’s email address/username (i.e. according to the value they were attempting to use during the login process), and all IP-related HTTP headers attached to the attempting user.

Upon failed login attempts, Jetpack sets a cookie (jpp_math_pass) for 1 day to remember if/when a user has successfully completed a math captcha to prove that they’re a real human. Learn more about this cookie.

Failed login attempts, which contain the user’s IP address, attempted username or email address, and user agent information are synced to a shadow site on the WordPress.com servers. More details can be found here.