What happens in your browser, what reaches an external service, and what you can control.
Prelaunch draft · Updated 11 October 2026. Before public release, complete the operator identity, activate and test feedback delivery, and set a retention policy. This is not a certification of legal compliance.
Reading and using the tools do not require analytics consent. Privacy choices never reveal spoilers.
This notice covers the guide’s code and activated services. It does not replace the hosting, email or media providers’ policies. There are no user accounts, public comments or profile database. The Contact page accepts feedback when delivery is active. The operator identity still needs completion before public release; the operator is not necessarily the host.
With your permission, the browser remembers your language, listening checkmarks, quiz state including answers, saved pages, and last selected journey so you can return later. Without permission, these tools work in temporary memory. Explicit spoiler choices last for the tab session; returning to a saved journey does not renew spoiler permission. Local progress is not submitted to the operator. Philosophical reflections are neither saved nor sent to analytics.
When sending is enabled and you press Send, your message, topic, form language, contact-page URL and any name or reply address you choose to include go to the site server and the FormSubmit email service to reach the site editor and handle your note. Your name and reply address are optional. Your note is not published on the site and does not subscribe you to a mailing list.
Your draft stays only in this tab’s memory, including when you navigate within the site or switch languages. It is not saved in localStorage or sessionStorage, disappears when you reload or close the tab, and is cleared after acceptance for sending. The site does not send form text or your reply address to its analytics tools. With analytics consent, only submission attempts and outcomes with a fixed language code and broad error category are counted; no form fields or submission identifiers are included.
To limit abuse and duplicates, the code keeps counters, a random submission ID, keyed hashes of the network address and request content, and sending status. These protection records contain neither message text nor a plain network address. Their configured lifetimes are short, up to 25 hours; in memory mode they are removed on the next cleanup or when the process ends. If shared protection through Upstash is enabled, it processes these records with expiry times.
FormSubmit documents a 30-day submissions archive. The receiving mailbox may retain the message under its own policies and settings. Hosting and email providers may also keep operational and network logs, including IP addresses, under their policies. This code does not determine those retention periods. Acceptance for sending does not confirm delivery or reading. A manual retry after an error or interruption may create a duplicate message. Please do not include sensitive information or other people’s personal details.
Google Analytics 4 runs only after an explicit analytics opt-in. It helps us understand which pages and journeys people use and what to improve. You can decline or withdraw permission at any time through Privacy settings in the footer.
Once activated and only with consent, measurement covers pageviews; journey starts, steps, resumes, exits and final-stop arrivals; quiz progress, question count and aggregate score; opening a video and playback confirmed by its player; map selections; search categories and result counts only; contact submission attempts, acceptance for sending or broad error categories; language changes, achievement sharing, badge download requests and bookmark changes. Final-stop arrival does not prove the journey was read or completed. Contact acceptance does not confirm delivery or reading.
Names, email addresses, search queries, form contents, free text, individual quiz answers, dilemma positions, submission identifiers and private URLs are excluded. Enhanced Measurement is off. This site’s tag denies advertising use and does not enable Google Signals or user-provided-data collection. GA4 may still produce basic automatic events and use a pseudonymous browser identifier, device information and approximate location; this is not anonymous measurement.
Connecting to Google exposes network information, including the IP address used for the connection. Events use the public canonical page and language URL without query strings, fragments or a referrer. The analytics tag is not loaded without consent. Withdrawal blocks future events and removes this site’s analytics cookies; it cannot recall information already sent.
Loading the site communicates with its host, which may process IP addresses, browser information and request logs under its policies. The guide’s preference controls do not manage provider logs. The actual hosting provider and its policy must be identified before public release. A search-engine noindex directive is not access control; confidential previews require host authentication.
YouTube players appear directly in selected content, without an additional permission screen or autoplay. Loading the player and its API connects to YouTube, including before you press Play. The browser may defer off-screen players for performance. We use youtube-nocookie.com. Privacy-enhanced mode does not mean zero collection: Google may receive connection, device and viewing data and use storage under its policies. Following an external link is governed by that destination. Providers may process information in other countries.
The consent record lasts 180 days unless changed or cleared sooner. Local progress remains until cleared or removed by the browser, with no current automatic expiry. Tab choices depend on the session and browser restoration. Clearing site data does not erase downloads, copied text, or information already received by providers. GA4 settings verified on 11 October 2026 retain event data for 2 months and user data for 14 months, with user retention reset by new activity. These controls do not apply to most aggregated reports. Cookie expiry and report retention are different.
Remembering and analytics are optional. Refusal leaves reading and players available while limiting cross-visit memory and measurement. YouTube players connect to their provider as part of displaying video content, as described above. Change choices from any page’s footer and clear saved local progress. Depending on applicable law, you may have access, correction, deletion, restriction, objection, or complaint rights. Not every right applies everywhere.
Measurement is intended to improve the guide, without session replay, belief profiling, or significant decisions about people. No system can guarantee protection against failures or unauthorised access to your device. Take care on shared devices. New providers, purposes, or collection methods require an updated notice and renewed choices where required; accepting terms does not replace analytics consent.
Place photographs and text are served by this site. OpenStreetMap tiles load automatically only when you open the map page, providing a map you can pan and zoom. Loading sends the provider your IP address, browser information, the site origin and tiles for the viewed area. The origin excludes the page path and place parameters. This site does not request your device location or save a personal route.
Leaving the map page removes the map and stops further tile loading. Returning to the map page loads it again. This is the map page’s normal display behavior, separate from remembering and analytics choices; no browser preference is stored for it. If the map is unavailable, the place list, photographs and schematic reading atlas remain available. OpenStreetMap may retain request information under its own policy.