Privacy Policy

Last updated: October 2026

ATTENTION! is a weekly military history podcast digest operated from the United Kingdom. This policy explains what data we collect, why, and how we handle it.

What we collect

We collect only what is necessary to deliver the newsletter:

• Email address — provided by you when you subscribe. This is the only personal data we require.
• Referral data — if you arrived via a link shared by another subscriber, we record which subscriber referred you. This is stored as an anonymous identifier, not a name or email.
• Campaign source — if you arrive through a link carrying campaign tags (the utm_ values in a web address), we store those tags, the page you signed up on and the signup date with your subscription record in Buttondown, so we can tell which links bring readers. The tags describe a link, not you. We use no cookies or browser storage for this: the tags travel in the page address while you browse the site.
• Feedback votes — if you click a rating link in the digest, we add one to an anonymous count for that edition and rating. The vote is not linked to your email address or subscriber record.

Why we collect it

We use your data for these purposes only:

• To send you the weekly ATTENTION! digest by email
• To track which digests and topics our subscribers find most valuable, so we can improve the product
• To understand how new subscribers find us (referral and campaign tracking)

Legal basis

We process your data on the basis of consent. You provide your email address voluntarily when you subscribe, and you confirm this via a double opt-in email. You can withdraw your consent at any time by unsubscribing.

Who has access to your data

We use the following third-party services to operate the newsletter:

• Buttondown — our email newsletter platform. Buttondown stores your email address and subscriber metadata and sends the digest on our behalf. Buttondown's privacy policy
• Plausible Analytics — privacy-friendly, cookieless website analytics, used when our Plausible account is active. Plausible records aggregate page views and signup events (with the campaign tags above, never your email address). It sets no cookies and builds no cross-site profiles. When a signup is accepted, our server may also send Plausible an event carrying your browser's user-agent and IP address, which Plausible uses only to count unique visitors. Plausible's privacy policy
• Cloudflare — hosts this website. To limit signup abuse we keep your IP address (for IPv6, its network prefix) for up to one hour as a rate-limit counter. We also keep a daily count of accepted signups per campaign; it contains no email address or IP address and is kept for up to 400 days.
• Cloudflare Turnstile — we use Cloudflare's Turnstile service to protect our signup form from bots and spam. It runs automatically in the background, usually with no puzzle or visible challenge. To distinguish humans from automated traffic, Cloudflare processes technical signals from your browser — including your IP address, a TLS/browser fingerprint, and your User-Agent — together with the site key and the page on which the check runs. Cloudflare states that it cannot directly identify individuals from these signals, does not use them for advertising, and uses them only to detect bots and improve the service. For full details see Cloudflare's Turnstile Privacy Policy.

We do not sell, rent, or share your email address or personal data with any other third party. We do not run advertising in the newsletter. We will never share your email list with sponsors, partners, or anyone else.

Data retention

We retain your email address and subscriber data for as long as you remain subscribed. If you unsubscribe, your data is deleted from our active subscriber list. Buttondown may retain some data in backups for a limited period in accordance with their own retention policies.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Delete your data (the simplest way is to unsubscribe; we will also honour deletion requests by email)
• Object to processing of your data
• Withdraw consent at any time by unsubscribing or contacting us
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled

Cookies

The ATTENTION! website sets no cookies of its own and stores nothing in your browser. Where our Plausible analytics account is active, Plausible counts aggregate page views without cookies. Cloudflare Turnstile, which protects the signup form, runs a check in your browser but does not set advertising cookies.

Changes to this policy

If we make material changes to this policy, we will note this in the digest and update the date at the top of this page.

Contact

If you have questions about this policy or want to exercise your data rights, email: privacy at attentionbriefing dot me