Black Box Notes

On opacity, auditability, and the limits of trust in modern AI systems.

Legal

Privacy Policy

A short policy by design. The publication is a static site that processes very little personal data on purpose. Below is everything we do, everything we don't, and what your rights are.

1. Who we are

"Black Box Notes," "the publication," "we," "us," and "our" refer to the editorial operation published at blackboxnotes.com. The data controller is Lumenwhite Media Holdings Pte Ltd, a Singapore-registered media holding company.

2. What data we collect when you visit this site

The site is a static publication. Browsing the site, reading an article, or downloading an asset does not require an account, does not place identifying cookies, and does not run third-party trackers. The publication's hosting provider receives standard HTTP request logs (IP address, user-agent, referrer, requested URL, timestamp) for the purpose of operating the service. The publication does not separately receive or analyse these logs.

3. What we collect when you email us

When you write to one of the editorial inboxes (editors, tips, corrections, press, subscribe), we receive the email itself and the metadata your email provider transmits with it. We retain that correspondence for as long as the editorial work concerning it is active, plus a year of archival retention, after which we delete it. We do not export editorial correspondence into external CRMs or marketing systems.

4. What we collect for the newsletter

When you submit your email address through the newsletter form, the publication's email provider (currently [TKTK: provider]) receives your address to deliver the newsletter and the standard email-delivery metadata (delivery, bounce, open, click — open and click tracking are configured off by default). You may unsubscribe through the unsubscribe link in any issue, after which the address is removed from the active list within seven days. Removed addresses are retained in a suppression list to prevent re-subscription without consent.

5. Cookies

The site does not set tracking cookies. The site does use the browser's localStorage to store two reader-side preferences without leaving the device: (a) the contents of the reading list saved through the "Save" button on articles, and (b) the user's preference about the reading-progress bar. Both can be cleared at any time from your browser's site-data settings. Neither leaves your device.

6. Search

The site search is provided by Pagefind, a static site-search library that runs entirely in your browser. Queries do not leave your device and are not transmitted to the publication or to any third party. The publication's hosting provider receives the standard HTTP request for the search index file; the contents of the search query are not part of that request.

7. Third-party services we rely on

  • Hosting. The site is hosted on Railway (railway.app), which processes standard HTTP request logs as described in its own privacy policy.
  • Email. Editorial email is processed by [TKTK: editorial mail provider]. Newsletter delivery is processed by [TKTK: newsletter provider].
  • Fonts. The site loads EB Garamond, Inter, and JetBrains Mono from Google Fonts. Google Fonts may receive your IP address as part of that request. We plan to migrate to a self-hosted font setup; see the changelog at the foot of this page.

8. Analytics

The publication does not run Google Analytics, Plausible, Fathom, or any other analytics product on the site. We do not have a dashboard showing your page-by-page movement and we do not want one.

9. Children

The publication is intended for adult professional readers. We do not knowingly collect personal information from children under 16. If a parent or guardian believes we have inadvertently collected such information, write to privacy at blackboxnotes dot com and we will delete it.

10. Your rights

Subject to the law of your jurisdiction (GDPR for EU/EEA readers, the Privacy Rights Act for California readers, the PDPA for Singapore readers, and equivalents elsewhere) you have the right to:

  • Request access to the personal data we hold about you;
  • Request correction of that data;
  • Request deletion of that data;
  • Object to processing on the grounds described in the relevant statute;
  • Withdraw consent to the newsletter at any time;
  • Lodge a complaint with the supervisory authority in your jurisdiction.

Send requests to privacy at blackboxnotes dot com. We respond within thirty days.

11. International transfers

The publication's publisher is based in Singapore. The publication's hosting and email providers are based in the United States and the European Union. By using the site or writing to us, you accept that the data described above will be processed in those jurisdictions under the standard contractual mechanisms each provider offers.

12. Security

The site is served over HTTPS. Editorial correspondence is protected by the same commercially reasonable measures any working publication uses. We do not promise absolute security; no publication can.

13. Changes to this policy

We revise this policy when our processing changes. The revision date appears below; the revision itself is logged in the changelog at the foot of the page. Material revisions trigger a note in the newsletter.

14. Contact

For any privacy question, write to privacy at blackboxnotes dot com.

Last revised: 2026-05-22.

Changelog

  • 2026-05-22. Initial publication.