Amy Kitcher — Privacy

This site is designed to collect as little personal information as possible.

What happens when somebody visits

The site does not contain advertising or separate analytics code, and it does not set its own cookies. Its typefaces, images, styles and scripts are served from the site itself.

The site is hosted and protected by Cloudflare. Like any hosting and security provider, Cloudflare receives technical information needed to deliver and protect the site. This can include an IP address, browser and device details, the page requested, and the time of the request. Cloudflare may also provide aggregate traffic and security information. Its handling of this data is explained in the Cloudflare Privacy Policy.

What the site remembers

The site remembers three small things in the visitor’s own browser:

which hidden clues have been found;
which stories have been opened; and
how many times one particular page has been visited.

This information is stored using local storage. It is not attached to a name or email address, and the site’s code does not deliberately send it elsewhere.

It remains in that browser until it is erased. The “Forget everything this site remembers” button removes it, as does clearing the site’s data through the browser. A private browsing window normally keeps it only until that window is closed.

The button is not a permanent opt-out. If one of the clues is activated or a story visited again afterwards, the site may remember it again.

The newsletter

Amy’s newsletter is provided by Buttondown. When somebody submits the subscription form, the email address and the technical information accompanying the request are sent directly to Buttondown.

Buttondown uses that information to confirm and manage the subscription, deliver Amy’s emails, and provide delivery information. Depending on the service settings and the recipient’s email software, this may include information about whether a message was delivered, opened or followed through to a link.

The email address is used to send updates from Amy. The legal basis for doing so is the subscriber’s consent. Every newsletter includes an unsubscribe link, and consent can be withdrawn at any time.

Buttondown handles this information under its Privacy Policy and explains its data-protection arrangements in its GDPR information.

Subscription information is kept until the person unsubscribes or asks for it to be deleted, although a limited record may need to be retained to honour an opt-out or meet a legal obligation.

Contacting Amy

If somebody contacts Amy by email, Amy receives the address, the message and any information included with it. That information is used to read and respond to the enquiry and is kept only for as long as it is reasonably needed.

Amy’s email provider (Google) also processes the message in order to deliver and store it.

Links to other places

This site links to magazines that have published Amy’s stories and to services including Ko-fi, Instagram, BBC and YouTube. Those are other people’s websites.

Once somebody follows one of those links, the destination site’s own privacy terms apply. Amy does not control those sites or their privacy practices. If a link has moved, broken or turned into something unexpected, it can be reported through the contact section and will be reviewed.

The site reduces YouTube’s use of cookies before somebody interacts with the player, but it does not make the viewing anonymous. Google will receive technical connection information, such as the visitor’s IP address, browser details and referring site, and may store or access information when the player is used.

Processing outside the UK

Cloudflare, Buttondown and Google are international service providers. Information handled by them may be processed outside the UK. Their privacy information explains where they process data and the safeguards they use for international transfers.

Privacy rights

For personal information controlled by Amy, Amy Kitcher is the data controller.

Where UK data-protection law applies, somebody may ask for a copy of their personal information, ask for inaccurate information to be corrected, ask for information to be deleted or restricted, or object to how it is being used. Newsletter consent can also be withdrawn at any time by using the unsubscribe link.

Requests can be made using the address in the contact section of the home page. Somebody who is unhappy with the response can also complain to the Information Commissioner’s Office.

This statement was last reviewed in September 2026.