Reader privacy.

Cameron Fairweather operates this optional readership analytics page. It is separate from Substack. You can continue to the publication without sharing device location.

What sharing sends

Only after you choose “Share location and continue,” a request record is created. If browser permission is granted, your coordinates and device-reported accuracy are sent to a private Supabase database. The record also includes the time, broad browser, operating system and device categories, and available referral hostname or campaign source label. We do not store the referring page’s full URL, a raw IP address, a name or an email in these event records.

The purpose is to understand geographic readership and where links are being opened. Coordinates do not establish your home address, identity, income, or demographics. No location is requested automatically when you return. A stored browser permission may mean the browser does not show a second popup after you choose to share again.

Retention and deletion

Event and location records expire from administrator access after 24 hours. Automatic deletion runs every minute, beginning one minute before that limit. Service outages can delay physical deletion. Audit metadata has the same 24-hour limit. The hosting and database providers may retain infrastructure logs or backups under their own policies, outside this application’s deletion schedule.

A random deletion receipt is stored in this browser, without coordinates. Return here in the same browser to delete your submission earlier. Receipts expire after 24 hours. If you clear your browser storage or use another browser, the receipt will not be available, but automatic expiry still applies. A failed or interrupted upload might have reached the database. The deletion control covers those attempts too.

Service providers

The reader page is hosted through ChatGPT Sites. Supabase processes the event data in the project’s United States region. Authorized administrators can view the data and its location map. Map display uses OpenStreetMap tiles. Infrastructure providers receive connection metadata to deliver these services. No IP geolocation vendor lookup is used by this device-sharing flow.

Your choice

Choosing “Continue without sharing” before starting a request creates no analytics event in this flow. If you choose to share but deny the browser permission, the request outcome may be recorded without coordinates. Location sharing is not required to read the publication. Substack applies its own privacy practices after you continue.