We collect three categories of information when you use the site. Each is collected only for the specific operational and analytical purposes described in this policy.

Server logs. When you request any page, our edge infrastructure (Cloudflare) and our origin server (Hostinger / nginx) automatically record the request: timestamp, request path, HTTP method, response code, response size, referring URL, the User-Agent string sent by your browser, and the IP address the request came from. These are standard web-server access logs and are retained for up to thirty days for operational diagnostics and security investigation. We do not correlate these logs to individual visitors and do not sell or share them with third parties except as required by lawful process or as necessary to investigate abuse.

Analytics events. We use a privacy-preserving analytics layer to count page views, referrers, country-level geography (not city or finer), and basic device characteristics (screen width, OS family, browser family). We do not use cross-site tracking cookies for analytics. We do not record cursor movements, keystrokes, or session replays. Analytics data is aggregated and retained for up to twenty-four months.

Optional submissions. If you contact us by email or fill in any form on the site (currently: the email digest signup, when enabled), we receive whatever information you choose to send. We use that information only to respond to your message or to deliver the digest you requested.

The site uses cookies and similar local-storage technologies for the following purposes only: security (preventing CSRF and bot abuse), preference (remembering whether you have dismissed any notice), and — if and when AdSense advertising is enabled — for ad personalization and frequency capping by Google. We do not use cookies to track you across other unrelated websites.

You can refuse or delete cookies through your browser settings. Disabling cookies will not prevent you from reading any page on the site, but it may prevent ads from being personalized to your region.

We intend to enable Google AdSense once the site is accepted into the program. When AdSense is enabled:

• Google, as a third-party vendor, will use cookies to serve ads to you based on your prior visits to this site and other sites on the web.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our sites and/or other sites on the Internet.
• You may opt out of personalized advertising by visitingGoogle Ads Settings or by visitingwww.aboutads.info.

We do not control the data Google collects or how it is used. Refer to Google’s ownadvertising policies for details.

If you are located in the European Economic Area, the United Kingdom, or California (or other US states with applicable privacy law), you have the right to request access to the personal information we hold about you, to request correction of inaccurate information, to request deletion, to object to certain processing, and to lodge a complaint with your local data protection authority.

Because we collect very little personal information beyond standard server logs and aggregated analytics, in most cases we have no personally identifiable information to return. If you have submitted information via email or signup form, you can request its deletion at any time by contacting privacy@co2h2o.cloud.

California residents have the right under the CCPA to request disclosure of the categories of personal information collected, the business purpose, and the categories of third parties with which information is shared. We do not sell personal information.

All traffic to and from the site is encrypted in transit via TLS. Server logs and analytics are stored on managed infrastructure with industry-standard access controls. We retain server logs for up to thirty days, analytics for up to twenty-four months, and contact form / email digest records for as long as you remain subscribed or until you request deletion.

We do not transfer personal information to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards in place.

The site is intended for an adult audience interested in publicly traded equities, financial filings, and infrastructure analysis. It is not directed to children under the age of thirteen and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will update the “last updated” date at the top of this page. Material changes will be flagged on the homepage for at least thirty days. Your continued use of the site after we post changes constitutes acceptance of the updated policy.