Privacy policy
Final Exfil is an automated, unofficial intel site. It has no accounts for readers, no ads and no tracking pixels of its own. This page lists everything it keeps and who else touches it.
What we collect
Newsletter. If you subscribe, we store your email address, the kinds of email you chose, when you subscribed, which form you used, and the tokens behind your confirmation and unsubscribe links. Nothing else is attached to it.
Preferences. Two cookies remember your theme and opaque-mode choice (fx_theme, fx_opaque). They identify nobody.
Server logs. Our hosting provider records ordinary request logs (IP address, browser, page, time) to run and secure the site. We do not build profiles from them.
Staff sign-in. People who run the site sign in with a session cookie (fx_at). Readers never need it.
Emails are sent through Mailtrap from finalexfil.com. The provider records delivery results (delivered, bounced, complained) and may record whether a message was opened or a link clicked; we use that only to stop sending to addresses that bounce or complain.
Every email carries a one-click unsubscribe link and the standard List-Unsubscribe headers. Unsubscribing stops all mail at once. To have your address erased from our records entirely, email hello@finalexfil.com from that address.
Public posts from X
The site reads public posts through the X API to compile its summaries. We display those posts the way X requires, unmodified and linked to the original, and we never show posts from protected accounts. A post that is deleted, withheld or made private on X is removed here within a day. If you want a post of yours left out of our summaries, email hello@finalexfil.com with the link.
Who else is involved
- Lovable Cloud (hosting, database and secrets; United States)
- Mailtrap (email delivery)
- X (the public-post data described above)
- Google Fonts (your browser fetches the typefaces from Google, which sees your IP address)
- GitHub (the public DMZ Codex repository; nothing about readers goes there)
We do not sell or share reader data with anyone else.
Your choices
Ask hello@finalexfil.com to see or erase anything we hold about you; we answer within 30 days. The site is not directed at children under 13 and we do not knowingly keep their data.
Changes to this policy appear on this page with a new date. See also the terms of use.