Privacy
Last updated: 14 September 2026
This policy explains what Lotus Mundi (lotusmundi.com) collects, why, and what you can do about it.
Who runs this site
Lotus Mundi is an independent site. For privacy questions or requests, email jay@lotusmundi.com.
What we collect
If you read the site: our web server records standard access logs, including your IP address, the time, the requested URL, and your browser's user agent. We use self-hosted, cookieless Umami analytics to understand aggregate page views, referrers, browsers, operating systems, and countries. Umami sets no analytics cookie and does not follow you to other websites.
If you subscribe or sign in: Ghost handles your email address and the name you provide. The subscription is confirmed when you click the sign-in link sent to your email. Mailgun sends that link and any newsletters you choose to receive.
If you use /join/: Cloudflare Turnstile checks browser and connection signals to reduce automated sign-up and sign-in requests. Cloudflare says these signals can include an IP address, user agent, TLS fingerprint, and the site you visit. Turnstile does not access your form entries or the email address you later give Ghost. Our server checks the verification token with Cloudflare, then grants a short-lived pass for up to two sign-in-link requests. See Cloudflare's Turnstile Privacy Addendum for its handling of these signals.
What we do not do
We do not sell your data or rent, trade, or share your email address for marketing. We run no advertising trackers, third-party analytics, or social media pixels.
Who provides these services
- Hetzner hosts the site and its data on servers we control.
- Mailgun (Sinch) sends sign-in links, account mail, and newsletters.
- Cloudflare Turnstile processes security signals when you use the join or sign-in flow. Cloudflare also describes its own use of those signals to improve Turnstile in its linked addendum.
Cookies
Ghost uses a session cookie when you sign in. After you pass the check on /join/, our site sets a secure, HTTP-only security cookie that expires in ten minutes. It permits at most two sign-in-link requests and is not used for advertising. Umami sets no cookies. Cloudflare's addendum describes any cookies it may use for Turnstile.
How long we keep things
We keep your member record while you are subscribed. If you unsubscribe and ask us to delete your account, we remove it. Server logs rotate within weeks. The signup security pass expires after ten minutes.
Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or stop emailing you. Every newsletter carries a one-click unsubscribe link. For anything else, email jay@lotusmundi.com.
If you are in the EU or UK, the GDPR gives you these rights explicitly, along with the right to complain to your local data protection authority. If you are in California, the CCPA gives you comparable rights, including the right not to be treated differently for exercising them. We do not sell personal information as the CCPA defines it.
Children
This site is not directed at children under 13, and we do not knowingly collect their data.
Changes
If this policy changes materially, we will update the date above and tell subscribers by email where it affects them.