# Privacy Policy - URL: https://hsalem.com/privacy/ Last updated: October 3, 2026 ## Who is responsible Hassan Salem operates hsalem.com. This policy covers the Notebook website, its account features, newsletter, and advertising. For questions or privacy requests, email hi@hsalem.com. Brickfall has a separate app privacy policy. [Contact Hassan Salem](mailto:hi@hsalem.com) [Brickfall privacy policy](https://hsalem.com/brickfall-privacy/) ## Website requests and security Your browser sends technical information needed to deliver this website, including your IP address, requested URL, and browser information. Hosting and security services may process this information to operate the site, diagnose failures, and prevent abuse. Sign-in requests also use IP addresses for abuse prevention. These security and operational purposes rely on legitimate interests in keeping the website available and safe. ## Accounts and reading preferences If you create a Notebook account, the site stores your email address, account status, and sign-in activity. Sign-in links are sent by email; the site stores hashed login tokens and session tokens. Login links expire after 15 minutes. The necessary notebook\_session cookie keeps you signed in for up to 60 days unless you sign out or the session is revoked. Session records include your IP address, browser user-agent, expiry, and last activity time. Likes, saved thoughts, and reading progress are linked to your account so these features work across visits. Your email and these private reading records are not published in the feed. Browser storage can remember display and reader preferences. Account and reading features process this information to provide the service you request; security checks protect that service. Contact hi@hsalem.com to request account deletion. ## Newsletter and email delivery Newsletter subscription is separate from account creation. Signing in does not subscribe you. Subscriptions use an email confirmation step. The site stores your email, subscription status, signup source and dates, and hashed confirmation and unsubscribe tokens. Newsletter delivery is based on your subscription consent; you can unsubscribe using the link in newsletter emails. Resend delivers account and subscription emails and receives the email address and message needed for delivery. [Resend privacy policy](https://resend.com/legal/privacy-policy) ## Website analytics The website supports optional Umami analytics when configured. This measures website use, such as page views, referring websites, and browser or device information. The Umami integration is separate from advertising and does not set analytics cookies. ## Google advertising This website integrates Google AdSense. Google and other advertising vendors may use cookies or similar technologies to show ads based on visits to this and other websites. Advertising requests can share information such as your IP address, page URL, and browser or device information. Google and its partners use advertising data for purposes including serving and measuring ads and preventing fraud. Personalized advertising depends on the applicable consent choices and settings. Google’s consent management platform presents advertising choices where applicable, including for visitors in the EEA, UK, and Switzerland. Its message identifies advertising partners and purposes. Consent is requested where required for advertising storage and processing. Non-personalized ads do not necessarily mean that no cookies or technical data are used. [How Google uses information from partner sites](https://policies.google.com/technologies/partner-sites) [Google privacy policy](https://policies.google.com/privacy) ## Advertising choices When Google’s consent controls are available on this site, use Privacy settings in the footer, or the consent link supplied by Google, to reopen the message and change or withdraw your choices. The message may be unavailable before site approval or publication, outside the regions where it applies, or when browser extensions block it. If the controls are unavailable, contact hi@hsalem.com for help. You can also manage Google ad personalization in Google’s ad settings. Browser settings can block or delete cookies, but deleting cookies is not the same as withdrawing consent through the consent message. Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal. [Google ad settings](https://adssettings.google.com/) [Choices for participating advertising companies](https://optout.aboutads.info/) ## Images and external websites Some images are loaded from Unsplash or other external image hosts. When your browser loads these images, the image provider receives technical request information, such as your IP address and browser details. These providers process requests under their own policies. [Unsplash privacy policy](https://unsplash.com/privacy) ## Purchases and external websites Book and product links can take you to Gumroad or another external service. Purchases and payment details are handled by that service under its own terms and privacy policy. External links do not make those services part of the Notebook account. [Gumroad privacy policy](https://gumroad.com/privacy) ## Retention and international processing Account, subscription, and reading records support the services described above. Session and login records have expiry times; expired credentials are periodically pruned when the account system runs. Provider retention periods, processing locations, and transfer safeguards depend on the service and its configuration. See the linked provider policies and contact hi@hsalem.com for details about your records. ## Your rights Where applicable under the GDPR, you may request access, correction, deletion, restriction of processing, and data portability. You may object to processing based on legitimate interests and withdraw consent for future processing. You may also complain to a data protection supervisory authority, including the Bayerisches Landesamt für Datenschutzaufsicht in Bavaria. To exercise your rights, contact hi@hsalem.com. We may need information to verify that a request concerns your data. [Bayerisches Landesamt für Datenschutzaufsicht](https://www.lda.bayern.de/en/) ## Changes to this policy This page will be updated when the website’s data practices change. The revision date appears at the top.