Privacy Policy

Last updated: 6 July 2026

Who we are

One Year Ago in AI (oneyearago.ai) is operated by Adam Allcock, an individual based in the United States. It is a personal editorial project, not a company. "We" and "us" in this policy means him. For the purposes of data protection law, Adam Allcock is the controller of the personal data described below. You can reach us at [email protected].

What we collect — and what we don't

Start with the second part, because it is the longer list. This site has no user accounts, no logins, no comment system, and no forms except the newsletter signup. We set no cookies of our own. We run no analytics of any kind — not even the privacy-friendly sort. We serve no advertising. We do not buy, sell, rent, trade, or otherwise share personal data with anyone. Reading the site requires giving us nothing.

Personal data enters the picture in exactly two places — the newsletter, if you choose to subscribe, and the technical logs any website generates by existing — plus a small amount of third-party content described below.

The newsletter

The Weekly Replay is a free weekly email digest. When you enter your email address in a signup form anywhere on the site (there is one on most pages, and a signup page), the form submits it directly to Kit (kit.com, formerly ConvertKit), the email service provider — it never touches a server we operate. Signup is double opt-in: Kit sends a confirmation email, and nothing further happens until you click the link in it.

Kit stores your email address and its consent records — the confirmation, its timestamp, and the IP address used at signup. Like most email providers, Kit may also collect delivery and engagement data (whether an email arrived, was opened, or had a link clicked) for the emails it sends. This data is processed in the United States and is covered by Kit's privacy policy.

Every email we send contains a one-click unsubscribe link. Unsubscribing, or emailing us and asking, removes your address. That is the whole lifecycle.

Hosting and server logs

The site is hosted on Cloudflare Pages, operated by Cloudflare, Inc. To deliver pages, cache content, and defend against abuse, Cloudflare processes visitor IP addresses and request logs as a technical necessity. We do not use these logs to identify or profile readers. Cloudflare retains them for a short period under its own privacy policy.

Third-party content on some pages

Some stories embed the original social posts they report on, using the platforms' official embed widgets. The embeds sit in a collapsed "From the record" panel, and nothing is requested from the platforms while it stays closed. When you open the panel, your browser loads a script from that platform, which may set its own cookies and collect data under its own policy:

• X (Twitter) — the official widget from platform.twitter.com, embedded with the do-not-track attribute data-dnt="true". See X's privacy policy.
• Reddit — the official embed widget from embed.reddit.com. See Reddit's privacy policy.

Article source lists also load small favicon images from DuckDuckGo's icon service (icons.duckduckgo.com), which sees your IP address and the domain of the icon requested — see DuckDuckGo's privacy policy. Until you open an embed panel, no page makes third-party requests beyond these icons. The RSS feed collects nothing at all.

Why we process this data

For readers in the EU and UK, the legal bases are straightforward. The newsletter runs on consent — you give it by confirming your subscription, and you withdraw it at any time by unsubscribing. Hosting and security logging rest on our legitimate interest in operating a stable, secure website that loads when you ask it to.

Where the data goes

Two recipients, both processors acting on our instructions: Cloudflare (hosting and content delivery) and Kit (newsletter delivery). Nobody else receives personal data from us, and none of it is sold. Both providers process data in the United States. For visitors in the EU or UK, that is an international transfer; both providers offer safeguards for such transfers, including standard contractual clauses.

How long we keep it

Newsletter data is kept until you unsubscribe or ask us to delete it, at which point it is removed. Server logs are retained briefly by Cloudflare under its own short retention schedule. We hold nothing else, so there is nothing else to retain.

Your rights

If you are in the EU or UK, the GDPR gives you the right to access the personal data we hold about you, to correct it, to have it erased, to receive it in a portable format, to object to or restrict its processing, and to withdraw consent at any time without affecting earlier processing. You also have the right to complain to your local supervisory authority. In practice, the data we hold about you is at most one email address, so most requests take one email to resolve.

If you are in California: we do not sell personal information, and we do not share it for cross-context behavioural advertising, as the CCPA defines those terms. You may still ask what we hold, ask for it to be deleted, and expect no different treatment for asking. We extend the same courtesy to readers everywhere, regardless of what the local law requires.

To exercise any of these rights, email [email protected].

Children

The site is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has subscribed to the newsletter, tell us and we will delete the address.

Changes to this policy

If our practices change — a new provider, a new feature that touches personal data — we will update this page and revise the date at the top. We will not quietly start doing any of the things the first section says we don't do.

Contact

Anything unclear, or any request under this policy: [email protected]. The rules for using the site itself live in the Terms of Service, and the editorial rules — including corrections — are on the About page.