Privacy
The short version: I'd like to know how many people read these sites and which pages they find useful. I don't need to know who you are.
This page covers usesigil.org, git.usesigil.org and tesserawm.org.
Analytics
usesigil.org and tesserawm.org use Plausible to count visits. It shows me totals for things like which pages were read, which site sent you here, your rough location, and your browser, operating system and device type. That's how I find out which docs people use and which ones nobody reaches.
Plausible doesn't set cookies, and it doesn't store your IP address or give you a lasting ID. It counts unique visitors with a hash that changes every 24 hours, so a visit today can't be connected to a visit tomorrow. The data is hosted in the EU.
If you block the script, everything on these sites keeps working.
usesigil.org also remembers whether you picked light or dark mode. That choice stays in your browser and never gets sent anywhere.
Hosting
Cloudflare serves all three sites. Like any host, it handles your IP address and the details of each request so it can deliver pages and keep attacks out. Cloudflare's privacy policy covers that part.
If you write to contact at usesigil.org, the message gets forwarded to my own inbox, and I keep it like any other email. I'll use it to reply to you, and nothing else.
Forge reports
Cloudflare sees your IP address, and we use it to limit abuse. Only a keyed hash of it reaches us, never the address itself, and IPv6 addresses are grouped by network first.
When you send a report or patch through the forge form, we store the report, the name and email you give us, and your choice about an acceptance email. We use these to review your report. Keep secrets out of the report and any patch or technical details you include.
Your report stays private until we accept it. Name and email fields stay private and aren't published. If we accept the report, its content enters the public record under an opaque, per-project reporter ID.
If you tick the email box, we'll email you the report's title and public link when it's accepted, while your contact details are still kept. This is an acceptance notification, not a mailing list subscription. Delivery retries can occasionally send a duplicate.
Before a report reaches our server it waits at Cloudflare, usually for a minute or two and never for more than 15 days.
Unreviewed reports expire after 30 days. After acceptance, private contact details are kept for at most another 30 days; accepted reports stay in the public record. Expired private data is removed by regular maintenance. A service outage can delay that cleanup.
To request deletion of a retained private report or contact details, write to contact at usesigil.org and include your receipt hash. Accepted reports remain in the permanent signed public record and its copies; we can't erase that history.
Questions
Have a question about any of this, or want an email you sent me deleted? Write to contact at usesigil.org and I'll take care of it.
Last updated: November 10, 2026.