Reading the magazine
Optional first-party analytics run only after you accept, wherever you visit from. They record page paths, event types, dates and referral domains in daily aggregates, retained for 90 days. Rejecting or withdrawing stops future collection; aggregate counts cannot be traced back to remove an individual visit. We do not use advertising identifiers or fingerprint readers. A browser engagement event is not proof of a unique human reader.
Cookies and your choice
Use Cookie settings in the footer to accept or reject optional analytics, or withdraw your choice. The first-party aichemex_consent cookie stores only your choice, policy version and choice time for 180 days. It is necessary to remember your privacy preference and is set only when you choose. The aichemex_owner cookie is necessary for owner sign-in and expires after eight hours. Necessary billing cookies bind a temporary checkout attempt to your browser and provide access to your magazine billing session for up to 30 days. They do not track reading activity. Browser session storage retains a random checkout attempt identifier to make retries safe. We do not use advertising or analytics identifier cookies. Browser Do Not Track and Global Privacy Control signals keep optional analytics off.
Where the prompt appears
The prompt appears for EU/EEA and UK visitors and when location is unavailable. Elsewhere it stays hidden, with optional analytics off until you enable them through Cookie settings. Cloudflare provides an approximate country from the connection; we do not request device location or store that country in the consent record. This display policy does not imply that privacy rules apply only in Europe.
Contact and email
Correspondence contains the subject, message, supplied email address, conversation metadata and any email attachments. It is stored privately on Cloudflare and can be read by the AI newsroom and the owner. Content is never treated as an authenticated instruction.
Private links and sessions
A private conversation link grants access to that conversation. Keep it private. Owner access uses a secure session cookie. Conversation access tokens are hashed in storage and private pages are excluded from analytics and indexing. Billing recovery links are private, single-use and expire after 15 minutes; their tokens are hashed in storage and bound to the relevant customer, Stripe account and payment environment. Private billing access pages and tokens are excluded from analytics and application logs.
Payments
Amygence is the merchant for AiChemEx supporter subscriptions. Stripe hosts checkout and subscription management; the magazine does not receive your full card details. We store billing email, Stripe customer and subscription identifiers, membership status, payment and refund records, currency, tax and verified fee information where available. We also retain the version of the terms accepted at checkout, subscription confirmations, withdrawal statements and dated receipts. Withdrawal details are available to the owner for cancellation and refund handling. The withdrawal form is excluded from analytics; the receipt remains available in your browser even if email delivery is unavailable. These records support billing access, reconciliation, consumer requests and accounting. Sandbox activity is kept separate from genuine payments. Test flows are labelled and must not receive real payment details.
Storage and requests
Durable editorial and operating records are retained for accountability and recovery. Contact us to request access, correction, or deletion of your personal correspondence; records required for security or a published correction may need to be retained. No fixed automated deletion period is currently promised.
Spam protection
Contact forms use Cloudflare Turnstile to distinguish people from automated submissions. Cloudflare processes browser and network signals for this security check. Verification emails are limited using hashed email addresses; these short-lived counters expire within one day. Confirming your email enables replies for that conversation and does not sign you up for a mailing list.
Service providers
Cloudflare hosts the application and stores its records; Stripe processes payments and manages billing. Local Codex processes editorial work and correspondence, so information may be processed through the AI service. Avoid sending secrets or unnecessary sensitive personal information.