Privacy Policy

Who we are

yfarmx.com is published by YFARMX LTD (trading as YFarmX), a company registered in England and Wales, company number 15605223, registered office 86–90 Paul Street, London, England, EC2A 4NE. For anything in this policy, contact us via the contact page.

What we collect

Very little. YFarmX is a static news site: there are no user accounts, no comment system and no advertising trackers, and we do not build analytics profiles of readers. The only personal details you can actively give us are what you type into the contact form, the email address you give one of our newsletter waitlists, or the details you give at checkout for the data API, and all three are covered below.

We do not set tracking cookies. The site stores a small amount of data in your own browser (localStorage), which stays there, with the one exception described under the data API and payments:

• Your light/dark theme preference.
• Arcade high scores, quiz badges and best times.
• Your chosen audio playback speed.
• Gas Fee Checker history (sparklines and the heat map are built locally from your own visits).
• Stories you bookmark on the Newswire, so the Saved filter can list them again.
• The last few pages you opened from the command palette, shown there as your recents.
• The checkout reference for your data API key, if you have bought one.

You can clear all of it at any time by clearing your browser's site data for yfarmx.com.

Traffic measurement

We use Cloudflare Web Analytics to understand how many people visit and which pages they read. It is deliberately privacy-first: it sets no cookies, stores nothing on your device, does not fingerprint your browser, and does not track you across other sites. We see aggregate numbers (page views, referrers, countries, device types), never a profile of you. Because nothing is stored on your device and no personal profile is built, no consent banner is required. See Cloudflare's privacy policy.

Interaction measurement

We count page interactions, reading progress, audio use, related links, tool interactions and accepted newsletter requests. These measurements contain a page path, an action and a broad source label, such as an AI service or newsletter. Search terms, full referring addresses, names, email addresses and IP addresses are excluded from these measurement records. Source labels describe the current page visit. The records are retained for up to three months and used in aggregate. This measurement respects Do Not Track and Global Privacy Control and creates no persistent reader identifier. To reduce automated submissions, a temporary code derived from the connection address and the current minute limits requests for up to two minutes. It is kept separately from the measurement records.

Your measurement preference

You can pause traffic and interaction measurement in this tabor resume it. Your choice is held in session storage in this browser tab and is cleared when the tab closes. It contains a preference, with no reader identifier, and stays on your device. Do Not Track and Global Privacy Control continue to take priority.

The data API and payments

Card payments for the data API are taken by Stripe, which processes the payment and holds your card details; we never see your card number. From Stripe we can read the email address, name and billing details you give at checkout and the state of your subscription, and we use them only to run your subscription, send a lost key and answer billing questions. Stripe keeps the billing records: see Stripe's privacy policy.

After checkout, the key page keeps your checkout reference in this browser's localStorage, so the same browser can show your key again. To do that it sends the reference to our server, which asks Stripe for the subscription and works the key out from it; the reference and the key are stored nowhere on our side. We keep a private key revision and monthly replacement count against the subscription when a key is replaced. The reference opens your key, so treat it like the key itself. The page's "Forget it here" button removes it from the browser.

If you ask for a new key by email, we look up the address you type in Stripe. Only if it paid for an active subscription do we email it a link, sent through Resend, our email provider: Resend's privacy policy. We keep no copy of the address. To limit repeated requests we keep a one-way scrambled form of it and of your network address, with the times of recent requests, plus a record of each link that has been opened and the key revision it made.

A pay-per-call purchase through x402 is a USDC transfer on the Base blockchain, which is public: anyone can see the paying wallet address and the transaction. We use them only to deliver the call you paid for.

If you ask for an invoice or a key on the data API page, your name, email address and message take the same route as the contact form below and are used only to set up and bill your access.

The contact form

If you write to us via the contact page, the name, email address, subject and message you type are saved as a dated record in a private repository we control, so that we can read your message and act on it. That repository is hosted for us by GitHub, Inc., which processes the record on our behalf as our hosting provider (see GitHub's privacy statement). The record also carries the country your submission came from, which Cloudflare supplies with the request. Your IP address is not part of the record: it is used in passing only, as a short hash held at Cloudflare's edge for an hour, to slow down bulk submissions.

A notification copy is then sent to our inbox by Web3Forms, which handles that delivery. We use what you send solely to deal with your message and reply to you. We keep the record until we have dealt with your enquiry and then delete it, and you can ask us to delete yours at any time via the contact page.

The newsletter waitlists

Two waitlists take email addresses ahead of launch: The Frontier Brief, and Signal from orbit, the briefing on the YFarmX Space pages. Adding your address to either one stores it for one purpose: to tell you when that newsletter launches and to send it to you once it does. We ask for nothing beyond the email address, we never sell it or pass it to advertisers, and your lawful basis is your consent, given when you submit the form.

Sign-ups take the same route as the contact form: the address is saved as a dated record in the private repository described above, hosted by GitHub, Inc., together with the country the submission came from, and a notification copy reaches our inbox via Web3Forms.

You can withdraw that consent and ask us to remove your address at any time via the contact page. We keep waitlist addresses until the newsletter launches and you either unsubscribe or ask to be removed; if a newsletter is shelved, we delete its list.

Hosting

The site is served by Cloudflare's global network. Like any web host, Cloudflare processes connection data (such as your IP address) transiently to deliver pages and protect the site from abuse. See Cloudflare's privacy policy.

Live data tools

Some tools fetch live figures directly from your browser to public data providers, for example CoinGecko, Coinbase and Binance (prices), public blockchain RPC endpoints (gas fees) and Koios (Cardano parameters). When a tool does this, those providers see a normal web request from your device, as if you had visited them yourself. We send them nothing about you, and the requests contain no identifiers from us.

External links

Articles, the events calendars and the knowledge hubs link out to other websites (organisers, protocols, research firms, sources). Their privacy practices are their own; this policy stops at our door.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018) you have rights of access, rectification, erasure and objection over personal data an organisation holds about you. Beyond the billing details Stripe holds for data API customers, we hold essentially none, so there is usually nothing to request, but if you believe we do hold something of yours, contact us and we will deal with it promptly. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Changes

If the site gains features that change what data exists, this policy is updated first and the "last updated" date above is changed. The Frontier Brief is one such step: today we hold waitlist addresses and the contact records described above, and when the newsletter itself launches this policy will describe the mailing before the first issue goes out.