What this site collects, and what it does not.

In short

This site uses no analytics, no advertising, no cookies, no tracking pixels, and no third-party content delivery networks. Fonts, images, stylesheets, scripts, and publication PDFs are served from this domain. Reading this site does not require you to identify yourself.

Two things do produce records: your web server request logs, held by our hosting provider, and the contact form, which is processed by a third-party service. Both are described below.

Hosting and request logs

This site is hosted by Github Pages. Like essentially all web hosts, it records standard request data, which may include your IP address, the date and time of the request, the resource requested, the HTTP status returned, your user agent string, and in some configurations the referring page.

ISR does not use these logs to build visitor profiles and does not combine them with other information. They are retained by the provider under its own retention schedule and are subject to its policies and to lawful process directed at that provider.

If you would prefer not to generate such a record, the publication corpus is mirrored at Small Wars Journal, and requests routed through a VPN or Tor are welcome and are not blocked.

Cookies and local storage

This site sets no cookies and writes nothing to local storage or session storage. There is no consent banner because there is nothing to consent to. No script on this site reads or writes persistent state on your device.

Third-party services

Contact form. The form on the contact section submits to Formspree, a third-party form processor. When you submit it, the name, email address, and message you enter are transmitted to and stored by Formspree, which also records the submitting IP address and timestamp. Formspree's handling of that data is governed by its own privacy policy, not this one. We retain submissions only as long as needed to respond and to keep a record of institutional correspondence.

Direct email. Writing to the address published on the contact section reaches our mail provider, ProtonMail, rather than Formspree. Email in transit is not end-to-end encrypted by default. Correspondence you would not want a third-party provider to hold should not be sent through either channel.

Outbound links. Publication mirrors link to Small Wars Journal, which operates independently and sets its own cookies. This site sends a restricted referrer on such clicks, but following the link places you on their infrastructure and under their policy.

No other third party receives data from your visit. There is no embedded video, no social media widget, no comment system, no chat, no CAPTCHA, and no hosted font or script.

Downloading the corpus

Publication PDFs are served directly from this domain. Downloading one produces an entry in the server logs described above and nothing else. The files contain no tracking beacons, no remote resource references, and no per-recipient identifiers, and their document metadata is stripped before publication.

How information is used

Information you send us is used to:

• respond to your inquiry;
• maintain a record of institutional correspondence relating to licensing, collaboration, contribution, or support;
• meet legal, tax, and nonprofit recordkeeping obligations.

ISR does not sell, rent, trade, or share personal information with third parties for their own purposes, and does not use it for advertising or profiling. We disclose information only to service providers acting on our behalf, where required by law or valid legal process, or where necessary to protect the rights or safety of a person.

Access, correction, and deletion

You may ask what correspondence we hold from you, ask us to correct it, or ask us to delete it. Write to the address on the contact section and we will act on the request within a reasonable period, subject to any records we are legally required to retain.

Depending on where you live, you may have specific statutory rights — including under the EU and UK General Data Protection Regulation and under California law — such as rights of access, correction, deletion, portability, and objection, and the right to complain to a supervisory authority. Where the GDPR applies, our lawful basis for handling correspondence is legitimate interest in responding to inquiries and operating the Institute. ISR does not sell personal information as that term is defined under California law.

Retention

Correspondence is retained for several years unless a longer period is required for legal or nonprofit recordkeeping purposes, or unless you ask us to delete it sooner. Server log retention is controlled by the hosting provider as described in section 02.

Security

This site is served over HTTPS. We limit the number of systems that hold correspondence and the number of people with access to them. No transmission or storage system is perfectly secure, and we do not represent otherwise; the appropriate assumption for sensitive material is that ordinary email and web forms are observable.

Children

This site is directed to a professional and institutional audience. It is not intended for children under 13, and we do not knowingly collect information from them. If we learn that we have, we will delete it.

Changes to this policy

Material changes will be reflected in the revision date at the top of this page. Because the substance of this policy is that the site collects almost nothing, any future addition of analytics, embedded third-party content, or tracking of any kind would be stated here explicitly rather than folded into a general revision.

Contacting us about privacy

Questions about this policy, or requests concerning information we hold, may be directed to the address published on the contact section of the main site.

ISR is an independent United States 501(c)(3) nonprofit organization incorporated in Wisconsin.