Privacy — Frontier Labs

Principle

We collect as little as this site can function with. There is no advertising on this site, no third-party analytics, no tracking pixels, no advertising cookies and no sale or sharing of personal data with anyone. If you read a publication and leave, we do not know you were here.

This notice describes the three cases in which we do hold personal data — newsletter subscription, requesting a publication, and contact correspondence — and exactly what happens in each.

Newsletter subscription

If you subscribe to the monthly brief, we store the email address you give us, the date you subscribed, and a label recording which page you subscribed from. We also store a one-way hash of your network address and your browser's user-agent string, solely to detect and block automated abuse of the form.

The hash is computed with a secret salt and cannot be reversed to recover your address. We do not retain the address itself.

Your email address is used for one purpose: sending the monthly brief. It is never used for anything else, never sold, and never shared with a third party. Every email includes a one-click unsubscribe, and unsubscribing removes you immediately.

What we store: Email address, subscription date, source label, hashed network address, user-agent string.
Why: To send the brief you asked for, and to prevent automated abuse of the form.
How long: Until you unsubscribe. Abuse-prevention hashes are discarded after 90 days.
Lawful basis: Consent, which you may withdraw at any time.

Requesting a publication

If you ask us for a report, we store the name, email address, organisation, role and purpose you give us, together with which publication you asked for and whether the email reached you. We also store the same one-way hash of your network address described above, for abuse control.

The email address is used to send you the publication you asked for. It is not added to the newsletter unless you tick the box, and it is never sold, rented or passed to a third party. We keep the register because knowing who reads our work is how we decide what to research next, and because a reader who found an error needs to be reachable.

What we store: Name, email address, organisation, role, stated purpose, publication requested, delivery status, hashed network address.
Why: To send you the publication, and to maintain a record of who our work reaches.
How long: Until you ask us to remove it. We will, without argument.
Lawful basis: Consent, given when you submit the form, which you may withdraw at any time.

Contact correspondence

If you write to us through the contact form, we store the name, email address, subject and message you provide, together with the same abuse-prevention hash described above.

We use this only to answer your enquiry and to keep a record of research correspondence and corrections, which forms part of the permanent record supporting our published work. Correspondence is not used for marketing and you will not be added to the newsletter by writing to us.

What we store: Name, email address, subject, message, hashed network address, user-agent string.
Why: To answer you, and to maintain the correspondence record that supports published corrections.
How long: Ordinary correspondence for two years. Correspondence resulting in a published correction is retained permanently as part of the change log.
Lawful basis: Legitimate interest in answering correspondence and maintaining an accurate research record.

What we do not do

We do not run advertising and we do not permit advertisers to influence what appears on this site.
We do not use third-party analytics, tracking pixels, session recording or fingerprinting.
We do not set advertising or tracking cookies. The site functions without any cookie that identifies you.
We do not sell, rent, share or transfer personal data to third parties for their own purposes.
We do not attempt to identify readers or to link reading behaviour to a person.

Where data is held

Subscriptions, publication requests and correspondence are stored in a managed PostgreSQL database operated on our behalf by Supabase, with access restricted to the Frontier Labs research group. Data is encrypted in transit and at rest. Email is delivered by a third-party sending service, which necessarily processes the address a message is sent to; it is not permitted to use it for any other purpose.

The site itself is served from a content delivery network. Standard server logs generated by that network are retained by the provider for a short period for operational and security purposes and are not used by us for analysis.

Your rights

You may ask us at any time to tell you what we hold about you, to correct it, to send you a copy, or to delete it. We will do so without argument and without asking why.

Requests are answered within thirty days and usually much sooner. There is no charge, and you do not need to use any particular form of words.

Access — ask what we hold and receive a copy.
Rectification — have anything inaccurate corrected.
Erasure — have your data deleted.
Restriction — ask us to stop processing while a question is resolved.
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interest.
Withdrawal of consent — unsubscribe, at any time, with immediate effect.

Children

This site is intended for a general and professional readership. We do not knowingly collect data from children, and we have no mechanism that would target or identify them.

Changes to this notice

If this notice changes, the revised version is published here and the date at the head of the page is updated. Material changes are described in the monthly brief so that subscribers are told rather than expected to check.

Contact and complaints

Write to frontierresearchlabs@gmail.com with any question about this notice, or to exercise any of the rights above. If you are not satisfied with our response, you are entitled to complain to your national data protection authority.