Privacy

If you request a subscription, we store your email address, the platforms you optionally choose, and signup and confirmation timestamps. We also store random confirmation and unsubscribe tokens plus a minimal delivery ledger. The ledger enforces quiet periods and frequency limits and prevents the same issue from being sent twice.

That's the whole list. Your age-group selection stays in your own browser (localStorage) and is never sent to us. We run no analytics, no ad trackers, and no third-party cookies.

First, we send one confirmation email. You receive no debriefs unless you confirm. After confirmation, there is a 72-hour quiet period. Then we send a concise debrief no more than once every seven days when there is something meaningful and relevant to report.

An urgent alert is reserved for a newly detected critical threat. A 24-hour cooldown means you never receive more than one proactive debrief or alert in a day. Confirmation and subscription-management messages are sent only in direct response to your request. Optional platform interests keep debriefs relevant; leaving them blank keeps the full view. We do not use your address for other products or partner offers.

The service operator and infrastructure needed to run O/OPG can process it. We never sell, rent, or share the list for someone else's marketing. Our email-delivery provider receives your address and delivery metadata only to deliver and operate the messages we ask it to send.

Until you leave. Using the personal unsubscribe link in an email removes your record from our active subscriber store and stops future debriefs. If you no longer have that link, the unsubscribe page can send a secure management link to the address you enter.

Removing the active record cannot recall messages already delivered. The delivery provider may retain limited operational, bounce, abuse-prevention, or audit records under its own retention rules. In local development and testing, messages may be written to an outbox file; those test artifacts are separate from the active list and must be cleared separately. Production delivery fails closed instead of falling back to that local outbox.

To meet U.S. commercial-email disclosure rules when they apply, each message includes a valid physical postal address. That may be a current street address, a registered U.S. Postal Service PO Box, or a qualifying registered commercial mail-receiving address. See the FTC's CAN-SPAM guidance. This explanation is general information, not legal advice.

O/OPG is written for parents and caregivers. We do not knowingly collect any information from children, and no part of the site asks for information about your child — the age-group filter describes bands, not people, and never leaves your browser.

Want your active subscription removed, exported, or explained? Use the personal link in any O/OPG email, or request a secure link from the unsubscribe page. For anything else, contact the operator named by the deployment you subscribed on.