Security What you have to do something about. Releases, CVEs, outages, breaking changes. Every post ends on the consequence for a system you own. One email a day at 07:40.

Accounts

Checkout requires no account, so an entitlement is held against an email address rather than against a user.

What it stores

If you subscribe, your email address and which wire kinds you asked for — that is the whole subscription

If you buy, Stripe collects your billing address and your card, and the entitlement is parked against your email address rather than against an account, because checkout deliberately requires no account

If you use the contact form, the address and message you send

Anonymous usage analytics — page views and clicks. Form inputs are masked in session recordings and no profile is created for a visitor who never identifies themselves

Who processes it

Stripe, takes the payment and holds the card details — we never see a card number.

Supabase, the database holding the wire, the subscriber list and the parked entitlements.

Resend, delivers the daily email and the contact form.

PostHog, anonymous product analytics, proxied through this domain.

Vercel, serves this site and holds its access logs.

Also true

Every entry on this wire is public information — a tag, a changelog, an advisory, a status page — gathered and linked rather than reproduced. Nothing about a reader is part of it.

Every email carries an unsubscribe link that works on the first click, without a login, because there is no login.

Payment pages are Stripe's own hosted checkout on a Stripe domain, so a card number is never typed on this site.