← Risk register Form ORR-P · rev. 2026-08-11

Privacy

This describes what the site actually does, checked against the code that does it. The code is public if you'd rather read that.

No accounts, no cookies, no analytics

You can read every page without an account. The site sets no cookies of its own and runs no analytics or advertising trackers. There is no profile of you here, because there is nothing to build one from.

That matters more than usual on this site: people arrive to read whether their own livelihood is at risk, and that's nobody's business but theirs.

If you vote or file a field report

We never store your IP address. We store a one-way hash of it, combined with a secret and the current date, purely to stop one person voting a hundred times. Because the date is part of the hash, the same visitor hashes differently tomorrow — so it cannot be used to follow anyone over time or to link their activity across occupations.

A vote stores the occupation, your choice, and that daily hash. A field report stores what you wrote, optionally how long you've done the job, and optionally an email if you offer one so an editor can follow up. The email is never published — the published data doesn't contain the field at all, so it cannot leak through a mistake in review.

If you subscribe

We store your address and what you asked to follow — the whole register, or one occupation. Nothing is sent until you click the confirmation link: an unconfirmed address is a claim, not consent, and is never mailed. Every email carries an unsubscribe link, and we don't sell, rent or share the list.

Ask us to delete your address at any time — hello@cookedindex.com — and it goes, without a retention argument.

Who else is involved

  • Our host serves the pages and keeps standard server logs, including IP addresses, for operating and securing the service.
  • Supabase stores votes, subscriptions and field reports on our behalf.
  • Google Fonts — the typefaces load from Google's servers, so Google receives your IP address when a page renders. We'd rather it didn't, and self-hosting them is on the list.
  • Links out to news publishers and training providers are ordinary links. Once you follow one you're on their site under their policy. Affiliate links are marked "partner link".

If a live-visitor counter is running, it records a country code and the same daily hash — never an IP, never a precise location.

Your rights

Wherever you live, you can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email hello@cookedindex.com.

In practice the honest answer for most people is that we hold nothing identifying at all — a rotating hash isn't something we can look you up by, which is the point of using one.

This site is run by one person and is not a company. If something here doesn't match what the code does, that's a bug — tell us and it gets fixed.