What we collect, in plain English.

1. What we collect

• Anonymous pageviews via Umami. Which pages get visited, roughly where in the world from (country-level), and which device class. No accounts, no IP storage, no cross-site profile.
• Newsletter signups (only if you opt in). Email address plus the time-zone region you pick. That's it. We never sell or share this list, and one-click unsubscribe is in every email.
• Correction submissions. When you submit a fact correction, we receive the page URL, the claim that's wrong, what it should say, and (optional) your name or handle and email. Email is only used to confirm and credit; we delete it after that thread closes.
• localStorage on your device. Small preference values stored only in your browser. We never read them from the server. Full list under "Cookies used" below.

2. What we don't collect

• No ads. No advertising network. No retargeting pixels.
• No third-party fingerprinting libraries.
• No social-media tracking pixels (no Meta Pixel, no TikTok pixel, no X tracker).
• No data sold or rented to anyone, ever.
• Kids Zone collects zero data. The /kids page runs no analytics beyond an anonymous pageview, has no forms, no submissions, and no localStorage. Designed COPPA-aware from the start.
• No IP-address logging beyond what our hosting provider transiently records to route the response. We don't store, aggregate, or analyze IPs ourselves.

3. Cookies and local storage

Everything below lives on your device. Clear your browser data and it's gone. We do not set tracking cookies, and we do not read these values from the server.

Umami may set a single first-party cookie purely to distinguish unique sessions for aggregated counts. It does not identify you individually and is not used to build a cross-site profile.

4. Your rights

• Clear local data anytime. Open your browser's site-data settings and wipe everything for btsarmy.io. All preferences reset; nothing we hold is affected because we don't hold it.
• Unsubscribe from the newsletter in one click. Every email contains a working unsubscribe link. No "please tell us why" survey, no friction.
• GDPR / UK GDPR / CCPA access and deletion requests. Email privacy@btsarmy.io with the address you signed up with. We respond within 30 days.
• Correction-form removal. If you submitted a correction and want your name removed from the public log, email us and we'll take it down within 7 days.

5. Third-party services

We try to keep the third-party footprint small. Here is the full list as of this review date:

• Our hosting provider. Serves the site bundle. Transient request logs only, they do not have access to your localStorage or newsletter list.
• Umami analytics (umami.is). Privacy-respecting, no personal data, aggregated counts only.
• Our newsletter provider (specific vendor listed here once selected). Only stores the address you submitted plus your time-zone region.
• Our form provider (specific vendor listed here once selected). Only used for correction submissions and similar opt-in forms.
• Embeds. Some pages embed YouTube videos or Spotify players. Those embeds may set their own cookies and load resources from their domains. We don't control or read those cookies. If you'd rather not load them, your browser's tracker-blocking will handle them like any other embed.

6. Social embeds and video players

Some member and news pages show posts straight from the artists' own verified accounts, social embeds from Instagram, X, and TikTok, plus YouTube video players. These are loaded directly from those platforms, not from us, so a few things are worth knowing:

• When one of these embeds loads, or when you click to play it, that platform sets its own cookies and receives your IP address and the page URL you're on. That data goes to Instagram/Meta, X, TikTok/ByteDance, or YouTube/Google under their own privacy policies, not this one. We can't read or control those cookies.
• We reduce this where we can: embeds are lazy-loaded (nothing is requested from the platform until the embed scrolls near view), and YouTube players use the youtube-nocookie.com privacy-enhanced domain. But activating an embed still shares data with that platform per its policy, that trade-off is unavoidable once you load third-party content.
• If you'd rather not load them at all, your browser's tracker-blocking or content-blocking will handle these embeds like any other third-party widget; the page still works without them and falls back to a plain link to the original post.
• Album art is self-hosted. Cover images we display are served from our own files, not pulled from a third-party CDN, so viewing them sends no data to anyone but our hosting provider.

7. Changes to this policy

We update this page when our practices change. Every revision is stamped with a new "Last reviewed" date at the bottom. Material changes (new third-party service, new data category, scope expansion) are also flagged in the next edition of The Bangtan Briefing newsletter, so subscribers see them without having to re-read the page.

8. Last reviewed

This policy was last reviewed on May 15, 2026. If a change has happened since and you noticed it before we did, send us a correction.

9. Contact

Privacy questions, access requests, deletion requests, or anything else from this page goes here:

A real human reads this inbox. Expect a reply within a few business days; GDPR and CCPA requests are answered within the statutory 30-day window.