Privacy Policy · latentstack

1. Who we are

latentstack (“we”, “us”, “our”) is an independent technical blog about AI, agents, automation and the modern tech stack, written by Suraj and available at https://mylateststack.vercel.app (the “Site”). For the purposes of data protection law, the author of latentstack is the controller of any personal information described in this policy.

2. What this policy covers

This policy applies to information processed when you visit the Site, read its pages, use its search, like or comment on posts, subscribe to its RSS feed or contact us. It does not cover third-party websites you reach through links on the Site; those sites have their own privacy policies.

3. Information we collect

Information you give us

The Site has no accounts, payments or sign-up forms. You give us information directly only when you choose to:

Comment on a post. We store the name you enter (optional; you can use a nickname or leave it blank to appear as “Anonymous”), your comment and the date. Comments are public: anyone visiting the post can read them. Please don’t include personal information you don’t want published.
Ask about sponsoring the Site through the form on /sponsor. We store your name, email, product, website and message so we can reply. This is never published or shared.
Contact us, for example through GitHub. We receive your name or username, your profile and whatever you include in your message.

Information collected automatically

Like every website, the Site is delivered by a web server. Our hosting provider, Vercel, automatically processes standard technical information about each request so that pages can be delivered, cached and protected from abuse. This typically includes:

your IP address (which can indicate an approximate location such as your country or city);
your browser type, version and operating system (the “user agent”);
the page or file requested, the date and time, and the response status;
the referring page, if your browser sends it.

We do not use this information to identify you, build a profile of you or track you across websites.

Likes and comments. When you like or comment on a post, we compute a one-way, salted hash of your IP address. We store only that hash, never the IP address itself, and use it solely to count each person’s like once per post and to limit how many comments can be posted in a short time, which keeps spam out. The hash cannot practically be turned back into your IP address.

Page-view analytics. We use Vercel Web Analytics to understand which pages are read and how visitors find the Site, only if you accept in the privacy dialog. If you decline, or your browser sends a Global Privacy Control signal, it is not loaded at all. It records page views together with the referring site, an approximate location at country level, and the browser, operating system and device type. It does not use cookies, and according to Vercel it distinguishes visitors using a hash of the incoming request that is discarded after a day, so it cannot follow you across sites or over time. We only see aggregated statistics, never individual visitors. Content blockers may prevent it from loading, which is fine.

Information we do not collect

Apart from Vercel Web Analytics (described above), we do not use analytics tools, advertising networks, tracking pixels or social media trackers.
We do not use device fingerprinting or cross-site tracking of any kind.
We do not collect special categories of data (such as health, religion or biometric data), and we ask that you do not send them to us.

Fonts are served from the Site itself, and site search runs entirely in your browser, so neither sends your activity to a third party.

4. Cookies, local storage and your consent

The Site does not set advertising or tracking cookies. On your first visit, a small privacy dialog lets you accept all, reject all or manage preferences by category. Rejecting is as easy as accepting, optional categories are off until you switch them on, and your choice never affects your access to the Site.

Strictly necessary (always on). Your privacy preferences and the time you set them, so we don’t ask on every page; and, only if you click like, a note of the posts you liked and a random device ID so each device counts once. These stay in your browser’s local storage and contain nothing about you.
Analytics (optional, off until you opt in). Cookieless Vercel Web Analytics, described in section 3. If you reject analytics, or your browser sends a Global Privacy Control (GPC) signal, it is not loaded at all.
Advertising (not used). The Site shows no ads and uses no advertising cookies. If that ever changes, we will update this policy first and ask for your consent before anything loads.

Changing or withdrawing consent. Use “Cookie settings” in the footer at any time to review your choice, switch categories on or off, or withdraw consent. Withdrawing doesn’t affect anything that happened before. Clearing your browser’s site data also removes everything above, and the dialog will ask again on your next visit. Your browser may separately cache pages and images to load them faster; you control that cache in your browser settings.

5. How we use information

We use the limited information described above only to:

deliver the Site and its content to you reliably and quickly;
show like counts and publish the comments you choose to post;
understand, in aggregate, which posts are read so we can write more useful ones;
keep the Site secure, detect and prevent abuse, attacks and fraud;
diagnose technical problems and errors;
reply to messages you send us and keep a record of that correspondence;
comply with legal obligations and enforce our Terms and Conditions.

We do not sell your personal information, we do not “share” it for cross-context behavioural advertising, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

6. Legal bases for processing

If you are in the European Economic Area, the United Kingdom or another place with similar laws, we rely on the following legal bases:

Legitimate interests: operating, securing and improving the Site, and responding to your messages. We have considered these interests against your rights and keep the data involved to a minimum.
Consent: for anything optional in the future, such as a newsletter. You can withdraw consent at any time.
Legal obligation: where we must keep or disclose information to comply with the law.

7. Service providers

We use a small number of trusted providers to run the Site. They process information on our behalf and under their own security and privacy commitments:

Vercel Inc. hosts the Site and delivers it through a global content delivery network, processing the technical request data described in section 3, and provides the cookieless Web Analytics described there (loaded only if you accept). See Vercel’s privacy policy.
GitHub, Inc. stores the Site’s source code and posts. Visitors do not interact with GitHub when reading the Site; GitHub only processes your data if you contact us or interact with us there. See GitHub’s privacy statement.
Upstash, Inc. provides the database that stores like counts, comments and the hashed values described in section 3. It is connected through Vercel’s storage marketplace. See Upstash’s website for its privacy and security terms.

We may also disclose information if required by law, to respond to valid legal requests, to protect the rights, safety or property of latentstack, its readers or others, or in connection with a transfer of the Site to a new owner, in which case this policy will continue to apply to information already collected.

8. Third-party links and sharing

Posts link to other websites, tools and documentation. Share buttons (for example, to X or LinkedIn) are plain links: nothing is sent to those services unless you click one, at which point you are on their website and subject to their privacy policies. We are not responsible for how third-party sites handle your information.

9. RSS, llms.txt and feed readers

The Site publishes an RSS feed and an llms.txt file so that feed readers, search engines and AI tools can read its content. If you subscribe in a feed reader, that reader fetches the feed from our host like any other visitor; the feed reader’s own privacy policy covers anything it collects about you. We cannot see who subscribes to the feed.

There is currently no email newsletter, and the Site does not collect email addresses. If we launch one, signing up will be optional, we will explain which email provider stores the list, every email will include an unsubscribe link, and we will update this policy before collecting any addresses.

11. How long we keep information

Technical request logs are kept by our hosting provider only for a limited period set by its log-retention limits, after which they are deleted automatically.
Comments stay published until we remove them (for example for breaking our Terms) or you ask us to delete them.
Hashed IP values used to count likes are kept for up to one year; those used to rate-limit comments expire after about ten minutes.
Sponsorship requests are kept for up to 12 months, or until you ask us to delete them; the hashed IP value used to rate-limit the form expires after about an hour.
Correspondence you send us is kept for as long as needed to respond and follow up, and then deleted, unless we need to keep it to comply with the law or resolve a dispute.

12. International data transfers

Our providers operate globally, so information may be processed in countries other than your own, including the United States, whose data protection laws may differ from yours. Where required, these transfers rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses and equivalent UK arrangements adopted by our providers.

13. Security

The Site is served only over encrypted HTTPS connections, has no user accounts or databases of personal information, and is built as static pages, which keeps the amount of data at risk very small. No method of transmission or storage is completely secure, but we take reasonable measures to protect the information involved and will act promptly if we learn of a security issue.

14. Your privacy rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you and receive a copy of it;
Correct information that is inaccurate or incomplete;
Delete your information (the “right to be forgotten”);
Restrict or object to how we process it, including processing based on legitimate interests;
Data portability: receive your information in a structured, machine-readable format;
Withdraw consent at any time where processing is based on consent;
Opt out of the sale or sharing of personal information. We do neither, so there is nothing to opt out of;
Non-discrimination: we will never treat you differently for exercising your rights;
Complain to your local data protection authority, such as a supervisory authority in the EU, the UK Information Commissioner’s Office, or the relevant authority where you live.

These rights come from laws such as the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA, India’s Digital Personal Data Protection Act, 2023, and similar laws elsewhere. To exercise any of them, contact us using the details in section 18. We will respond within the time the applicable law requires, typically within one month, and may need to verify your request. Because we keep so little data, and request logs are generally not linked to a name, we may not be able to find information about you in them.

15. Do Not Track and Global Privacy Control

The Site does not track you across websites. If your browser sends a Global Privacy Control (GPC) signal, we treat it as declining optional analytics and do not load them unless you later choose Accept yourself. We also treat a GPC signal as a valid request to opt out of the sale or sharing of personal information, which we do not do in any case.

16. Children’s privacy

The Site is written for a general and professional audience and is not directed at children under 13, or under 16 in the EEA and UK. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

17. Changes to this policy

We may update this policy when the Site changes or the law requires it. The “Last updated” date at the top always shows the current version. If a change is significant, for example if we start using cookies or a newsletter, we will make it clear on the Site before the change takes effect.

18. Contact

For any question about this policy or your personal information, or to exercise your rights, reach out via GitHub for now. A contact email is coming soon. Please include enough detail for us to understand and respond to your request.

The short version