This policy explains what personal information this site collects, why, who else receives it, and what you can do about it. It is written to be read rather than to be survived, and it applies to themultiplane.com and every page on it.
Who is responsible
This site is published by an individual, not a company. The person responsible for the decisions described here — the "data controller" under European law and the "business" under California law — is:
- Name
- Thomas Sonnabend
- Postal address
- 8010 Via Sardinia St
Estero, FL 33928
United States - Last reviewed
- August 25, 2026
What this site collects
There are no accounts, no logins, no comment system, and no newsletter. There is no form on this site that asks you for personal information. What exists is this:
- Server logs. The hosting provider records standard technical information when a page is served: IP address, the page requested, the time, the browser and operating system reported by your device, and the referring page. This happens for every website and is necessary to deliver the site and to detect abuse.
- Strictly necessary storage. A small amount of data stored in your own browser to remember your cookie choices and whether you selected the day or dusk colour setting. It is not transmitted anywhere and is never used for advertising.
- Analytics, only if you allow it. If you consent to analytics, Google Analytics collects usage information — pages viewed, approximate location derived from a truncated IP address, device type, and how you arrived. It is used in aggregate to see which articles are read.
- Advertising, only if you allow it. If you consent to advertising cookies, Google may set and read cookies to measure whether an advertisement led you here and to limit how often the same advertisement is shown to you.
- Email you send. If you write to the address above, that message and address sit in an email account until they are no longer needed.
Nothing optional runs until you say so
This site implements Google Consent Mode v2. Before you make a choice, the signals for ad_storage, ad_user_data, ad_personalization and analytics_storage are all set to denied, and no analytics or advertising tag is loaded at all. They are only loaded and only updated to "granted" for the categories you actively permit. Rejecting optional cookies leaves those signals denied, permanently, until you change your mind.
You can change or withdraw consent at any time using the "Cookie settings" link at the bottom of every page. Withdrawal takes effect immediately and does not affect processing that already took place.
Why this processing is lawful (for readers in the EU, EEA and UK)
- Consent (Article 6(1)(a) GDPR) for analytics and advertising cookies and the processing that follows from them. Given freely, and withdrawable at any moment.
- Legitimate interests (Article 6(1)(f)) for server logs and basic security — the interest being to keep the site available and to prevent abuse. This is limited to what hosting a website necessarily involves.
- Consent or legitimate interests for correspondence, depending on why you wrote.
Who else receives data
This site does not sell personal information for money. Where you have consented to advertising cookies, the resulting processing by Google may constitute "sharing" for cross-context behavioural advertising under California law, and you may opt out at any time via cookie settings or by writing to me.
- The hosting provider, which necessarily processes server logs to serve the site.
- Google LLC / Google Ireland Limited, for Google Analytics and Google advertising services, and only to the extent you have consented. Google's own handling is governed by its privacy policy and its advertising terms; Google acts as an independent controller for some of this processing.
- An email provider, if you write to me.
Nobody else. There is no data broker, no mailing list rental, no analytics tag beyond the one named, and no third-party embedded content that tracks you across sites.
International transfers
This site is published from the United States and its providers operate globally, so information may be processed outside your country, including in the United States. Where personal data of readers in the EEA or UK is transferred, the providers involved rely on the European Commission's standard contractual clauses or the applicable adequacy framework. If you are not comfortable with this, decline optional cookies — the remaining processing is limited to what serving a web page requires.
How long anything is kept
- Server logs
- Retained by the hosting provider for a short rolling period, then deleted
- Consent record
- Stored in your browser until you clear it or change your choice
- Analytics data
- Retained per the Google Analytics retention setting, in aggregate reporting form
- Advertising cookies
- Per the lifetimes listed in the cookie policy
- Correspondence
- Kept while relevant, then deleted
Your rights
Depending on where you live, you may have the right to know what personal information is held about you, to get a copy of it, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable form, to withdraw consent, and to opt out of the sale or sharing of personal information or of targeted advertising. You will not be treated differently for exercising any of these.
Readers in California have these rights under the CCPA as amended by the CPRA, including the right to opt out of sharing for cross-context behavioural advertising and the right to limit use of sensitive personal information — this site does not collect sensitive personal information in the first place. Readers in Virginia, Colorado, Connecticut, Utah, Texas and other US states with comprehensive privacy laws have broadly equivalent rights. Readers in the EEA and UK have the rights described in the GDPR, including the right to lodge a complaint with a supervisory authority.
To exercise anything above, email the address at the top of this page and say plainly what you want. I will respond within the time your law allows — 45 days in California, one month under the GDPR — and I may need to ask a question to establish that the request relates to you.
Global Privacy Control
If your browser sends a Global Privacy Control signal, this site treats it as a valid opt-out of the sale or sharing of personal information and leaves the advertising consent signals denied.
Children
This site is written for a general adult audience. It is not directed at children under 13, and it does not knowingly collect personal information from them. If you believe a child has provided personal information here, write to me and it will be deleted.
Security
The site is served over HTTPS. There is no database of readers to breach, because none is kept — that is a design decision rather than an accident. No method of transmission over the internet is completely secure, and I will not claim otherwise.
Changes to this policy
If this policy changes materially, the date at the top of this page changes with it, and the change will be described rather than slipped in. Continuing to use the site after a change means the current version applies.
The plain version: this site wants to be read, not to build a profile of you. Decline everything optional and it still works exactly the same. Nothing here is gated behind consent, and nothing is degraded by refusing it.