What we collect.

Two things, at most. An email address — if and only if you subscribe to the list. Aggregate, cookieless page-view events — if and when we enable analytics, which we currently have not.

That is the entire inventory. No cookies set by this site. No third-party trackers (no Google Analytics, no Meta Pixel, no Segment, no LinkedIn, no TikTok). No user accounts, so no profiles, passwords, or login telemetry. No IP-address logging beyond the standard web-server access logs Cloudflare keeps at its edge for abuse and uptime — which we do not query, mine, or correlate with anything.

When you subscribe, your email address is sent to Resend (resend.com), our email service provider, and stored in our production audience for The Filings. Resend acts as a data processor on our behalf under a standard data processing agreement.

We use the address only to send new-episode notifications. We do not enrich it with third-party data, share it, sell it, rent it, or hand it to any other service. The record stays until you unsubscribe.

Every email carries a one-click unsubscribe link in the footer. Unsubscribing removes you from the active audience immediately. We keep no shadow list, no suppression metadata beyond what Resend stores by default to prevent re-adding you by accident, and no copy of the address elsewhere.

When analytics is enabled on this site, the tool is Umami, self-hosted on our own infrastructure. Umami is a privacy-friendly, cookieless analytics platform: it records page-view events, referrer, country (from IP at the edge, not stored), screen size, and browser — aggregated, never tied to an identity.

No cookies. No cross-site tracking. No fingerprinting. No advertising identifiers. Data sits on a server we control; no third party gets a copy.

Current state: analytics is not yet wired up on thefilings.tv. When it goes live, this page is updated and the date in the header moves. We do not display a consent banner because no personal data is collected; aggregated, non-identifying analytics fall outside the ePrivacy Directive's storage-on-device test and the GDPR's personal-data definition.

Episode pages include a click-to-load player that loads the YouTube video only after you press play. The embed uses youtube-nocookie.com, YouTube's privacy-enhanced domain. Until you click play, no request is made to YouTube and no YouTube cookies are set in your browser.

Once you press play, you are interacting with YouTube directly and Google's privacy terms apply. Read them at policies.google.com/privacy.

If you prefer not to load the embed at all, every episode is also reachable on YouTube directly at youtube.com/@thefilingstv.

We set no cookies on thefilings.tv. None for preferences, none for sessions, none for analytics. When analytics flips on, Umami still sets none — it is cookieless by design.

Cloudflare, our edge network, may set a small number of operational cookies on its own — most commonly __cf_bm for bot management. These are standard infrastructure cookies set by the CDN, not by this site, and we have no access to their contents. See Cloudflare's cookie policy for the full list and lifetimes.

Email addresses are retained in the Resend audience until you unsubscribe or ask us to delete. When you unsubscribe, the record is removed from the active audience.

Aggregated analytics events, once enabled, are retained for 13 months and then rolled into monthly aggregates with the per-event rows deleted. Cloudflare edge access logs are retained per Cloudflare's own defaults; we do not extend that retention.

To request deletion of your email or any other data you believe we hold, write to [email protected]. We action deletion requests within 30 days and reply to confirm.

Takedown and correction requests for editorial content are not privacy requests — they follow the corrections protocol in Editorial standards §6.

GDPR — EU, EEA, and UK residents. You have the right to access, rectify, erase, port, restrict the processing of, and object to the processing of your personal data. You also have the right to withdraw consent at any time. Our lawful basis for processing your email address is your consent under Article 6(1)(a) GDPR, given when you subscribe. Withdrawal is via the unsubscribe link in any email, or by writing to [email protected]. You also have the right to lodge a complaint with your national data-protection supervisory authority.

CCPA / CPRA — California residents. You have the right to know what personal information we have collected, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. There is nothing to opt out of, because the sharing does not happen.

To exercise any of these rights, write to [email protected]. We do not require any specific form. We will not discriminate against you for exercising any right under CCPA.

Entity-level privacy practices and corporate responsibility for Aqidium LLC — the publisher of record — are documented at aqidium.com/privacy.

General privacy questions, deletion requests, GDPR or CCPA requests, and anything else on this page: [email protected]. Routes to the Aqidium umbrella inbox; replies come from the editor.

This policy is versioned in the page header. When it changes, we update it in place and the date moves. There is no separate change log because the git history of this site is the change log.