The short version: a service worker, if you say yes.

There is no consent banner on this site because there is nothing here to consent to until you choose to subscribe. Then there is, and this page explains exactly what.

Before you do anything

Reading the dossier sets no advertising cookies, no analytics cookies and no tracking pixels. We do not run Google Analytics, we do not run a Meta pixel, and we do not sell or share an audience. Two external services are contacted to render the page: Google Fonts, which serves the typefaces, and OneSignal's CDN, which serves the push SDK script. Contacting a server means it sees your IP address, which is unavoidable for any resource loaded from anywhere, and we would rather tell you that than pretend the site is hermetic.

If you allow notifications

Our push provider is OneSignal, Inc., a company in the United States. When you tick the consent box and your browser's permission prompt appears, and you accept it, the following happens on your device:

• A service worker file (OneSignalSDKWorker.js) is registered on this domain. It is what allows a notification to reach you when this tab is closed.
• localStorage and IndexedDB entries are written, holding your push subscription identifier and the SDK's state. These are not cookies in the strict sense, but they are storage on your device, and the rules that matter (PECR) treat them the same way, so we are listing them here.
• Your subscription identifier, plus browser and device type, is sent to OneSignal along with the name and email you gave us, and tagged with this domain so we know which publication you subscribed to.

Under PECR, push notifications need your consent before they start, which is why the tick box exists and why the browser asks separately. Two gates, both of which you control. Declining either one breaks nothing: the dossier reads identically.

What it is not doing

The push subscription cannot read your browsing history, cannot see other tabs, and is not used to profile you or to build an advertising audience. We use it for one thing: sending a short note when a fact in this dossier stops being true.

Turning it off, and clearing it out

• Notifications: your browser's site settings for aethervallis.com, where you can set notifications to Block. That revokes the permission at source and we cannot override it.
• Email: the unsubscribe link on anything we send, or write to [email protected].
• The stored data: clearing site data for this domain in your browser removes the localStorage and IndexedDB entries and unregisters the service worker.
• Our copy: ask us to delete you and we will delete the record, not just flag it inactive. Your full rights, including how to complain to the ICO, are on the privacy notice.

Third parties, named

• OneSignal, Inc. (United States) - email and web push delivery, acting as our processor. Data leaves the UK under the UK IDTA/Addendum to the Standard Contractual Clauses. Privacy policy.
• Google Fonts - serves the three typefaces this site uses.
• Our hosting provider - serves the pages and keeps short-lived server logs.

That is the complete list. If it grows, this page changes on the same day.