Ari’s Space*   est. 2026
Skip to content
ari*s space[ a. ]
← Library / 2026-05-16

Privacy Policy

How Ari Leavesley, trading as Pushing Squares, handles personal data on this site. Privacy policy version 2.3, effective 5 August 2026.

13 parts / Hover to explore. Click to read.

How Ari Leavesley, trading as Pushing Squares, handles personal data on this site. Privacy policy version 2.3, effective 5 August 2026.

Cookie-banner choice
  +-> Accept
  |     analytics + replay
  +-> Decline
        analytics stays off

Service cookies depend
on the features you use.
This is the policy's consent distinction for optional analytics. Necessary sign-in and checkout cookies belong to their own feature use; the map does not certify current runtime behaviour.
Context Pack (for agents)

Ari Leavesley, trading as Pushing Squares
Version 2.3 / Effective 5 August 2026
https://pushingsquares.com

Update issued 5 August 2026: historical notice. Version 2.3 activated PostHog analytics and session replay after you choose Accept on the cookie banner, replacing the reserved analytics wording in version 2.2. The original notice was scheduled to remain on this page until 4 September 2026.

1. Data controller (Art. 4(7), Art. 13(1)(a))

Ari Leavesley, trading as Pushing Squares, is responsible for processing your personal data. Ari is a sole trader based in the United Kingdom, with no registered company.

For privacy matters, contact ari@pushingsquares.com.

No Data Protection Officer is appointed. The scale and nature of this site's processing do not meet the thresholds in Article 37(1) for a mandatory appointment.

2. What this policy covers

This policy covers personal data processed when you submit a qualm, use the cookie banner or otherwise interact with pushingsquares.com or aris-space.com. It applies to everyone whose personal data is processed in connection with the site.

3. Personal data collected (Art. 13(1)(c), Art. 14)

The people covered include qualm submitters, website visitors and SFL download subscribers.

CategoryWhat is collected
Contact dataThe email address you enter on the qualm form
SFL signup dataEmail address, consent flag, source page and signup timestamp
Submission contentThe title and body text you write
Uploaded filesFiles or images you attach, including their contents
Other people's data in uploadsNames, faces, addresses or messages appearing in screenshots, recordings or documents
Technical dataA salted hash of your IP address, rather than the raw IP, and your user-agent string
Consent recordsThe consent timestamp and value of the aris_consent cookie
Analytics, with consent onlyAnonymous PostHog events and page views, with no autocapture, IP retention or cross-site identifiers

Data comes directly from your qualm submission, SFL download form and cookie-banner choice. Your browser supplies technical data and analytics events (Art. 14(2)(f)).

Other people's personal data. If an upload contains someone else's personal data, Ari becomes a controller for that data too. Before uploading, redact names, faces, addresses and messages that are not relevant. Anyone identifiable in an upload can contact Ari directly. Their data will be deleted on request, regardless of the normal retention schedule.

Special category data. Do not upload data covered by Article 9 UK GDPR: health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, sex life or sexual orientation. Unsolicited special category data will be deleted on sight and will not be used for editorial purposes.

#PurposeDataLegal basisRetention
1Receive and read your qualmEmail, title, body and uploaded filesConsent, Art. 6(1)(a)Email, title and body: 12 months from last contact, then deletion. Uploads: 30 days after a related post is published or 12 months from submission, whichever is sooner.
2Send follow-up questions by email or email you when a related post is liveEmail, title and bodyConsent, Art. 6(1)(a)As in row 1.
3Use anonymised qualm content, without identifying details, as material for public postsTitle, body and uploaded filesLegitimate interests, Art. 6(1)(f); assessment belowFor as long as the editorial output needs it. It is not republished after the source qualm is deleted.
4Publish a post that names or identifies youEmail, name and the identifying details you agree toConsent, Art. 6(1)(a), obtained separately, explicitly and in writingFor the published post's lifetime.
5Detect and block abusive or automated submissions, and investigate misuseSalted IP hash and user-agent stringLegitimate interests, Art. 6(1)(f); assessment below90 days, then deletion.
6Prevent automated form abuse through Cloudflare TurnstileTurnstile token and signals Cloudflare processesLegitimate interests, Art. 6(1)(f)Cloudflare processes these under its DPA. Ari does not retain them.
7Control admin access through Cloudflare AccessAdmin identity credentials, not visitor dataLegitimate interests, Art. 6(1)(f)For the duration of admin access.
8Host and deliver the site through VercelStandard web-request metadataLegitimate interests, Art. 6(1)(f)Under Vercel's processor retention.
9Provide anonymous analytics and session replayAnonymous events, page views and session replayConsent, Art. 6(1)(a), only after Accept on the cookie bannerPostHog loads only after Accept; Decline keeps it off. No autocapture of form fields, IP retention or cross-site advertising identifiers. Replay masks inputs. Deletion on request within 30 days.
10Demonstrate consent under Art. 7(1)The aris_consent cookie and matching local preferenceLegal obligation, Art. 6(1)(c)For as long as the related qualm or cookie choice exists.
11Deliver SFL downloads and occasional product emails about SFL and related toolsSFL signup dataConsent, Art. 6(1)(a), through the checkbox at downloadUntil you ask for removal, then deletion within 30 days.

Withdrawing consent (Art. 7(3)). Email ari@pushingsquares.com at any time. Withdrawal is processed within 30 days and does not affect the lawfulness of processing before withdrawal.

Legitimate interests assessments

Row 3: editorial use. The interest is running a useful public knowledge resource that helps others with the same problems. The necessity assessment treats real submissions as the only authentic source of those problems; synthetic or aggregated material would not serve that editorial purpose.

The balancing assessment relies on a second consent step: names, emails, file contents and identifying screenshots are not published without separate, explicit written consent under row 4. Prominent consent wording at collection sets expectations. The assessed risk is minimal because identifying material does not pass the editorial filter without that further consent.

Row 5: spam and abuse prevention. The interest is protecting the submission form. A signal is needed to detect repeated abuse; a salted, pseudonymised IP hash is the stated minimum effective signal. Raw IPs are not stored, the hash stays for only 90 days and there are no cross-site identifiers. The assessed impact on the person is low.

Rows 6-8: bot challenge, admin access and hosting. The interest is keeping the site secure and available. Each service provides a function that cannot reasonably be performed without it. Each processor works under an Article 28 DPA and receives only the data needed for that function. The assessed impact on the person is low.

5. Who processes the data (Art. 13(1)(e), Art. 28)

These processors act on Ari's behalf under written data processing agreements meeting Article 28 UK GDPR requirements.

RecipientRolePurposeCountry
Vercel Inc.Processor, Art. 28Hosting and edge delivery; receiving qualm submissions and serving the siteUnited States
Neon Inc.Processor, Art. 28Postgres storage of submission textUnited States, US-East
Cloudflare, Inc.Processor, Art. 28R2 upload storage, Turnstile bot challenge, Access admin gating and the EU-region D1 database for SFL signupsUnited States / North America
PostHog Inc.Processor, Art. 28Anonymous analytics, loaded only after cookie consentUnited States

Personal data is not shared outside these processors unless the law requires it or you give explicit prior written permission.

Submissions are not used to train AI models. Data is not sold or used for advertising.

6. International transfers (Chapter V, Art. 44-49)

All four processors are based in the United States. For certified processors, UK transfers rely on the UK Extension to the EU-US Data Privacy Framework, also called the UK-US Data Bridge, with Standard Contractual Clauses where appropriate.

RecipientCountryTransfer mechanismReference
VercelUnited StatesUK Extension to the EU-US Data Privacy Framework, DPF-certified, with SCCs as fallbackVercel DPF compliance
NeonUnited StatesUK Extension to the EU-US Data Privacy Framework, DPF-certifiedNeon DPA and GDPR statement
CloudflareUnited StatesUK Extension to the EU-US Data Privacy Framework, DPF-certified, plus SCCsCloudflare and GDPR compliance
PostHogUnited StatesUK Extension to the EU-US Data Privacy Framework, DPF-certified, plus SCCsPostHog DPA

A transfer impact assessment has been conducted using each processor's published security and disclosure information. To request a copy of the safeguards relied on, use the contact in Section 1.

7. Retention (Art. 5(1)(e), Art. 13(2)(a))

Personal data is kept only as long as necessary for the purposes in Section 4, using the periods in its table. Where consent is the basis, you can request earlier deletion at any time. It will be actioned within 30 days.

8. Your rights (Art. 12-22, Art. 77)

Subject to the conditions in UK GDPR, you can:

  • Access your data (Art. 15).
  • Ask for corrections (Art. 16).
  • Request erasure, or the right to be forgotten (Art. 17).
  • Restrict processing (Art. 18).
  • Request data portability (Art. 20).
  • Object to processing (Art. 21).
  • Exercise the right not to be subject to a solely automated decision (Art. 22).
  • Withdraw consent at any time (Art. 7(3)).
  • Complain to a supervisory authority (Art. 77).

Email ari@pushingsquares.com to exercise these rights. Responses are provided within 30 days.

9. Automated decisions and profiling (Art. 22)

The site does not carry out solely automated decision-making, including profiling, that produces legal or similarly significant effects.

10. Cookies and similar technologies

Consent record. The banner sets aris_consent to accepted or declined for one year. A matching browser preference keeps the banner dismissed. This cookie is strictly necessary for the consent mechanism and is set under PECR Regulation 6(4).

Necessary service cookies. Clerk sign-in and Stripe checkout set their own session and security cookies only when you use those features. These are not advertising trackers.

Analytics. Choosing Accept loads optional PostHog analytics and session replay for product improvement. Choosing Decline keeps them off. There is no autocapture of form fields, IP retention or use of cross-site advertising identifiers, and session replay masks form inputs.

To change your choice, clear the site's cookies and site data in your browser, then reload the page.

11. Policy changes

The version and effective date at the top identify the latest revision. Material changes are announced in a banner at the top of this page for 30 days.

12. Contact and complaints (Art. 77)

Send policy questions or complaints to ari@pushingsquares.com.

You can also complain to a supervisory authority. The site's lead supervisory authority is the Information Commissioner's Office, at ico.org.uk.

End of policy: version 2.3, effective 5 August 2026.

[ comments ]

guests welcome. members show first in the list

no comments yet. start the thread_

1 / 15