Trust
Privacy
Short version: this site sets no cookies, runs no advertising trackers, and has never recorded an IP address. Not once, not ever. Page views are counted with cookieless analytics that cannot tell one visitor from another. If you have not given us your email address, we hold nothing that identifies you.
If you subscribe to release alerts
We store your email address, which page of this site you signed up from, and the times you subscribed, confirmed and (if you do) unsubscribed. Alongside those we keep two random tokens — one that confirms the address is really yours, one that unsubscribes you in a single click.
That is the whole record. No name, no IP address, no location, nothing about what you read on the site. We use double opt-in, so an address nobody confirms never receives anything and is never used.
Emails are delivered by Resend, which necessarily handles your address in order to deliver the message. We do not sell, rent or share the list with anyone else, and there is no third party involved beyond delivery.
If you click a link to a shop
Outbound links to retailers go through a /go/ address so
we can count clicks. That record contains four things: which link,
when, which page of this site you clicked it from, and your
country as Cloudflare reports it. Plus a shortened one-way hash of your
browser's user-agent string.
Three deliberate limits are worth stating, because they are what keeps that from becoming an identifier. The referring page is stored as a path only — query strings are discarded, because they carry search terms and session IDs. If you arrived from another site entirely, that is dropped rather than recorded. And the user-agent hash is truncated and is never stored next to an IP address, because we do not store IP addresses at all.
Cookies
None. This site sets no cookies of any kind — not for analytics, not for preferences, not for advertising. There is no consent banner because there is nothing to consent to.
Analytics
Since 24 August 2026 this site uses Cloudflare Web Analytics. It counts page views. It sets no cookie, stores nothing on your device, builds no profile and does not fingerprint you — there is no identifier that follows you between two page loads, which is why this page can still say there is nothing to consent to.
What is recorded, per view: the page URL, the referring URL, and the broad properties your browser sends to every site anyway — country, browser, operating system, device type, and how quickly the page loaded. That is the whole list. It is aggregate from the moment it is collected; there is no view of it that shows an individual visitor, because none is stored.
What is not recorded: your IP address (Cloudflare uses it to serve the request and discards it rather than storing it in the analytics), any advertising identifier, and anything at all about you on any other website. The data is not sold, shared or used for advertising, and it is not joined to the email list or to anything else on this site.
This is the one third-party script on the site. It loads from
static.cloudflareinsights.com, and it is written into the
site's own source rather than injected invisibly at the network edge.
Cloudflare offers both; the second would have let this page go on
claiming nothing was measured while something was. The version in the
source is the one that can be checked, and a test fails the build if
this page and the beacon ever disagree.
It does not run on the countdown widget other sites embed, and it does not run in the admin area. The widget is the important one: it appears on other people's pages, and measuring their readers from here is not something we will do.
Hosting
The site runs on Cloudflare. Like any host or CDN, Cloudflare processes the technical details of each request — including your IP address — in order to serve the page and to protect against attacks. That happens at the network layer and is subject to Cloudflare's own policies. Our application never reads or stores it.
What we deliberately do not do
- No advertising or marketing trackers. The only third-party script on the site is the cookieless analytics beacon described above.
- No cross-site tracking, no advertising identifiers, no data brokers.
- No IP address logging in the application, anywhere.
- No account system, so nothing to breach and no password to lose.
- No selling, renting or sharing of the email list. Ever.
Your choices
Every email we send carries a one-click unsubscribe link that works immediately and needs no reply, no login and no explanation. Using it stops all mail.
If you want your address removed entirely rather than marked unsubscribed, that is a reasonable thing to ask for and we will do it. Email privacy@coquina.app, which reaches a monitored inbox. The same address is the right one for any other request about your data, or for a correction anywhere on the site.
Changes
If what this site collects changes, this page changes in the same release. It is a description of what the code does, and it is kept that way on purpose.
Last reviewed 24 August 2026. Not affiliated with, endorsed by, or sponsored by Rockstar Games or Take-Two Interactive. All trademarks are the property of their respective owners.