Collect what the feature needs. Keep the rest private.
Identity Field Notes is built as a publication and practitioner community, not a lead-generation or behavioral-advertising system. Some features need account or submission data; this page explains what is public, what stays private, and which service providers are involved.
What is public
Your chosen public identity.
Community posts, article comments, replies and conference discussions are public. They are displayed with your chosen public name or pseudonym and, if you provide them, a public headline or avatar. Administrator-assigned flair and earned community badges such as Entered the Matrix are also public.
Only fields intended for publication.
Approved job listings may publish the role title, company, location, link, summary and the submission-source label. Accepted Guest Voices may publish the chosen byline, role/company, author link and article content. The account used to submit them is not part of the public listing.
What stays private
Authentication data is not a public profile.
Supabase Auth stores the email address and authentication information needed for Google sign-in or email magic links. Internal account identifiers, authentication provider details and sign-in metadata are not exposed through the public community API.
Admins can see what they need to protect the community.
Authorized administrators can view verified account email addresses, join and last-sign-in timestamps, moderation roles, bans and moderation records. That information is used for account administration, abuse prevention and moderation, and is not shown publicly.
Drafts stay in the review queue.
Job and Guest Voice submissions are visible to the person who submitted them and authorized moderators while they are under review. Guest Voice pitches, drafts, reviewer notes and the submitter's account identity are not made public merely because a submission exists.
Sign-in does not publish your Google identity.
New community accounts start with a neutral public name and no provider-supplied avatar. You can choose a public pseudonym after sign-in. Your Google or email sign-in identity remains separate from that public name.
Newsletter and browser storage
Email subscriptions
The email digest signup is sent directly to Buttondown, which processes the subscriber email address and newsletter delivery. Identity Field Notes does not sell subscriber addresses or provide the subscriber list to sponsors. Every newsletter should include an unsubscribe mechanism provided by the newsletter service.
Sessions and display preferences
The site stores display-theme preferences in your browser. Supabase may store the authenticated session in browser storage so you remain signed in. Google Identity Services may use browser or account-level authentication mechanisms, including cookies or FedCM, according to Google's implementation and your browser settings.
Community achievements
Service providers
Authentication and community data
Supabase provides authentication and the database used for profiles, comments, discussions, moderation, flair, badges and submissions. Row-level security and restricted public views are used to separate public community data from account and moderation data.
Optional Google sign-in
Google Identity Services is used when you choose Google sign-in. Google processes that authentication under its own terms and privacy practices.
Hosting and delivery
The public site is hosted through GitHub Pages. Browser libraries may also be delivered through third-party CDNs such as jsDelivr. Like other web infrastructure, these services may receive ordinary network information such as IP address, user agent and request timing.
Publication research, not account profiling
Server-side publication automation uses OpenAI to research and summarize public identity-security sources. Community account data, private submissions and newsletter subscriber lists are not intentionally sent to the research model as part of the normal publishing workflow.
Analytics, sponsors and third-party links
Sponsors: sponsors may buy clearly labeled placement. They do not receive newsletter lists, private account data, private submissions or moderation data, and sponsored editorial content may not add third-party tracking pixels through IFN.
External links: source, event, training, job and author links take you to third-party sites whose own privacy practices apply.
Retention, deletion and security
Keep data while the feature needs it.
Account, community, moderation and submission data may be retained while the account or related content remains active and as needed for moderation or abuse prevention. Newsletter data is retained by the newsletter provider according to its service and your subscription status.
Unsubscribe, change your public name, or request deletion.
You can unsubscribe from email using the newsletter link and change your public community name while signed in. For account or privacy deletion requests, use the contact path at Banta.Pro ↗. Deleting an authentication account is designed to cascade to its associated public profile, comments, submissions, roles, flair, badges and bans.