Privacy

I am Lior Mor. I publish as Quadrivium Analytics, from Tel Aviv, Israel. Quadrivium Analytics is a trading name, not a company: there is no entity and no staff, and no one else in my business has access. Questions and requests go to lior@quadriviumanalytics.com.

They set no cookies. Your browser loads every font, stylesheet, and image from this domain. On the public pages, one script is loaded from another host: Cloudflare's analytics beacon, which counts page views. It sets no cookies and Cloudflare states that it does not fingerprint your browser. It records the page you are on, the site that sent you, your country, and your browser and device type. My basis for it is my legitimate interest in knowing how the site is read. There is no embedded video, no social button, and no advertising. The pages also carry one script tag holding a block of description data that browsers read and never run.

The site is hosted by Cloudflare, which keeps standard server logs of requests, including IP addresses, on a schedule Cloudflare sets and I cannot change. Cloudflare also asks browsers to report failed requests to it. Chrome and other Chromium browsers send those reports to a.nel.cloudflare.com. A visit that works sends nothing.

I read Cloudflare's traffic reports. They are counts: how many requests arrived, from which countries, and which of them Cloudflare treated as threats. Cloudflare's security view can also show me the IP address behind a single request. My basis for the logs and the reports is my legitimate interest in keeping the site up and knowing how it is read.

Cloudflare Email Routing forwards mail for this domain into a Google mailbox. I read it there, and nobody else has access to it. A reply is written in that same mailbox, which keeps its own copy, and Google hands it to Brevo to send.

You can also write without the form, to the address in the footer; nothing about writing to me is required of you.

The trial page has one form: name, firm, email, and the markets you follow. Submitting it sends me a single email through Cloudflare's infrastructure, along with the country the request came from; nothing is stored on the site itself and no account is created. From there it is handled exactly like email you send me directly, under the rules above.

I keep your name, firm, markets of interest, and email address in order to send the notes and to correspond with you. The basis is your consent, given when you ask for the trial, and you can withdraw it at any time.

The notes carry a small image loaded from Brevo's servers, and the links in them are rewritten to pass through Brevo. That is how Brevo records whether a message was delivered, whether it was opened, and which links were clicked. I read those records to see which notes are read and what subscribers find useful. Blocking remote images in your mail client stops an open being recorded, and you can write at any time and ask to be sent notes with no tracking in them.

To stop receiving notes, reply and say so, or use the unsubscribe link in the message.

If I have given you a credential for the ledger, I keep a record of its use. Each ledger page opened under the credential, and each failed sign-in that uses a credential name I recognize, is written to a log holding four things: the credential name, the page address, the date and time, and whether the request succeeded. Chart images are not logged one by one; I keep a daily count of them per credential instead, and the credential's own record keeps the first and the latest time it was used. The gate also keeps a short record of its own errors, which can carry the credential name, and sends me one message the first time a credential is used.

That log holds no IP address, no browser and no country, and I do not join it to the mailing records or to anything else I hold about you. Cloudflare's own server logs, described above, cover ledger pages like every other page, and those do hold IP addresses; that part is Cloudflare's and on Cloudflare's schedule, not mine. Ledger pages carry no beacon and no script of any kind.

I use the log for two purposes: to know whether the work I send is read, and to notice misuse of a credential, such as one being shared or used to copy the ledger in bulk. I may also use it to decide whether and when to follow up with you about my work. My basis is my legitimate interest in knowing that my work reaches its reader and in protecting it, balanced against yours, which is why the log is this small. It is held by Cloudflare as my processor, in a database inside the European Union. I read it in Israel, on the same footing as the mail, below.

Page-by-page entries and the daily chart counts are deleted twelve months after they are written. What is left after that is a monthly count of pages read per credential, which I keep while the credential exists and for a year after it ends. If a credential is ever in dispute, a claim that it was shared, say, I keep what that dispute needs until it is over, and nothing more.

You can object to this logging at any time, by writing to me. I will look at each objection on its own facts. If you object, I will stop using the log to see whether the work is read, and I will stop using it to decide whether to follow up with you. I may keep the smallest part of it while your credential is open, so I can still notice a credential being shared, and I may keep what an actual dispute needs until that dispute is over; where neither applies, I will delete the entries I hold under your credential. You can also ask me to end the credential instead, which stops the logging at its source. I will not end your credential because you objected, unless that is what you ask for.

Your other rights are set out below, and they apply to this log like anything else.

Cloudflare hosts the site and routes the mail. Google holds the mailbox. Brevo sends the mail and keeps the delivery records described above. Each of them also keeps this data for its own periods, set out in its own privacy terms.

Brevo is French. Cloudflare and Google are United States companies, and they take European and United Kingdom data under the European Commission's standard contractual clauses and their own Data Privacy Framework certifications. I read the mail, and the ledger log, in Israel, which the European Commission and the United Kingdom both recognize as giving adequate protection. Write to me for copies.

I do not sell, rent, or share the list. Correspondence is never published, and no subscriber or firm is named on the public pages of this site.

Correspondence stays in the mailbox. Ask for it to be deleted and it will be, unless there is a reason to keep it, such as an unresolved dispute. Brevo's delivery records are a separate set and are dealt with separately.

While you subscribe I keep your name, firm, markets, and email address. If you unsubscribe I delete them within 30 days, apart from two things. Your email address stays on a do-not-send list, because keeping it there is how the unsubscribe is honored. And the record of which notes were sent to you and when, and whether they were opened, is kept for twelve months.

You can ask me what I hold about you, ask for a copy to take elsewhere, ask me to correct or delete it, ask me to restrict its use, object to its use, or withdraw your consent. Withdrawing consent does not undo what was done while it was in force.

Write to the address above. You will have an answer within a month, or word within a month that a complicated request will take up to two months longer.

If you are in the European Union or the United Kingdom you can also complain to a data protection authority, in the country where you live, where you work, or where you think the problem happened. In the United Kingdom that is the Information Commissioner's Office. You do not have to write to me first, though it is usually quicker if you do.

If you think I have handled your data badly, you can complain to me about it, by writing to the address above. I will tell you I have your complaint within thirty days, look into it, and tell you what I found and what I did.

If this page changes in a way that matters, the date at the top changes with it.