Privacy

What we collect

If you subscribe, we collect your email address and, when present, the utm_* parameters and referral code from your referring link — used to understand how people find us and to credit referrals. To operate the newsletter and the site we also process standard request logs and coarse rate-limit counters (a one-way identifier derived from IP address and session, used for abuse prevention), and email delivery events from our provider. Bounces, complaints, and unsubscribes are recorded so we stop mailing an address and honor suppression. We do not use email opens or clicks to build subscriber profiles or make editorial decisions. No passwords are collected.

Who processes it

Email delivery runs on Resend, our email service provider. Subscriber records and issue content are stored in a Supabase database. The site is hosted and delivered on Cloudflare (Workers, CDN, and cookieless analytics). Campaign pages may use Metaadvertising technology after consent. Issue pages may use Google AdSense after consent. Adobe Typekit supplies site fonts. Each provider processes information under its own terms and our applicable agreement.

Analytics

Analytics on the main site is privacy-friendly and cookieless — it counts visits and referrers without tracking you across sites. Campaign-specific landing pages may use Meta's browser pixel and server-side conversion API, but only after an affirmative marketing choice, to measure pageviews and confirmed subscriptions from those campaigns. When permitted, the server event can include a hashed email address, IP address, user agent, Meta browser identifiers, and campaign parameters. A Global Privacy Control signal is treated as a denial of this optional marketing tracking.

Advertising

The issue archive and dated issue pages may display ads supplied by Google AdSense. Google and its advertising partners may use cookies, local storage, device information, IP address, and activity on those pages to select, deliver, measure, and prevent fraud involving ads. Roxi itself does not display ads. On USDR issue pages, a consent message lets you accept, reject, or later change these uses before the Google advertising script loads. Learn more about how Google handles data in its business products.

We do not sell your personal information. The homepage, About, Glossary, Sources, Editorial, and comparison pages do not contain AdSense placements.

Retention

Active subscriber records remain while you are subscribed. After an unsubscribe or deletion request, we retain only the minimum suppression record needed to ensure we do not mail the address again, plus records required for security or law. Database abuse-prevention events are deleted on a short rolling schedule. Hosting and advertising providers apply the retention periods in their configured services and published terms.

Your choices, access & correction

Every email includes a one-click unsubscribe link. You can reject optional advertising storage and reopen “Privacy choices” on issue pages at any time. Where applicable, we honor browser-based opt-out signals such as Global Privacy Control. We do not currently respond to the legacy Do Not Track signal because it has no consistent industry meaning.

To request access, correction, or deletion of personal information, email hello@usdr-tech.com from the address connected to the request. We will verify the request and explain any limited information we must retain, such as an unsubscribe suppression record.

Policy changes & independence

Material changes will be identified by a new “last updated” date and, where appropriate, a notice on the site or in the newsletter. USDR and Roxi are independent and are not affiliated with or endorsed by the U.S. Department of Defense or any other government agency.

Contact

Questions about privacy: hello@usdr-tech.com. USDR Research LLC · 522 W Riverside Ave, Ste N, Spokane, WA 99201.