Legal
Privacy Policy
Effective Date: 25 July 2026
Project Wrecked is a personal project that publishes writing and public datasets. It sells nothing and has no accounts. This policy describes the small amount of data it does handle, under the UK GDPR and the Data Protection Act 2018.
The short version
We do not sell anything, do not run advertising, and do not build profiles of visitors. Nothing on this site asks you to identify yourself except the newsletter, which is opt-in. We never store raw IP addresses.
What we collect
Newsletter (opt-in). If you subscribe, your email address is processed by Beehiiv, who send the newsletter on our behalf. Unsubscribe at any time using the link in any issue, which removes you entirely.
Wreck submissions (anonymous). The submission form is designed to collect no identifying information. Please do not put names, client names or contact details in the free-text fields. Submissions may be published in edited form.
Stack Survey (anonymous). Answers are multiple-choice plus an optional short note. We store a salted one-way hash of your IP address purely to stop the same person submitting repeatedly within a few hours. The address itself is never stored, and the hash cannot be reversed to recover it.
Automated traffic (no people). We log requests from crawlers and scanners to publish the Bot Ledger and Threat Ledger. We record the user-agent, the path requested, and for hostile requests a salted one-way hash of the source address plus a verdict on whether it matched a published crawler range. Raw addresses are used only in memory to compute that verdict and are never written down. Published output is aggregate only.
Analytics. Google Analytics is used for basic visitor statistics. You can block it with any standard content blocker, and we neither need nor use it for anything individual.
What we do not collect
No accounts, no passwords, no payment details, no advertising identifiers, no cross-site tracking, and no raw IP addresses in any stored record.
Why we are allowed to
The newsletter runs on your consent. The anonymous datasets and the security logging run on legitimate interests: understanding how automated traffic behaves, and protecting the site. Because the security records contain only a salted hash and no address, the impact on any individual is minimal, which is the point of designing it that way.
How long we keep it
Newsletter data lasts until you unsubscribe. Crawler and probe records are aggregated over a rolling 30-day window; older rows are retained only as counts. Survey responses are kept indefinitely in anonymous aggregate.
Previous purchases
Until July 2026 this site sold digital templates through Lemon Squeezy, who processed the payment and customer data for those orders. That shop is closed and we hold no ongoing customer database. If you bought something and want your data removed, use the check-in form and we will confirm what, if anything, remains.
Your rights
You can ask for access to, correction of, or deletion of any personal data we hold, and you can complain to the Information Commissioner's Office. In practice we hold almost nothing that identifies anyone, so the usual answer to an access request is that there is no record to return.
Contact
There is no public email address for this site. Use the check-in form for anything, including a request to see or delete what we hold about you.