Skip to content

Privacy

Privacy, written plainly.

Salari is a personal publishing site for books, essays, free resources and newsletter material. I collect only what is needed to run the site, send requested material and understand what is useful.

This site tracks visits. Its own monitor records every public visit (the page, time, referrer, a visitor identifier, device and browser, location and network address), whichever button you press in the cookie bar. Google Analytics and Microsoft Clarity run on every page as well. The bar has two choices: Default keeps them cookieless (Google receives consent-mode pings without cookies, Clarity sets no cookie and keeps no session); Accept lets them set their own cookies and keep a session. You can change your choice at any time from Manage cookies at the bottom of every page.

Information you provide

If you sign up for the newsletter or request a free resource, I collect your email address and any form fields you submit.

If you use the contact or feedback form, I receive the name, reply email, topic, subject, message and page context you choose to send.

Newsletter and forms

The newsletter form is handled directly by Salari using privately managed mail infrastructure for confirmation, delivery and unsubscribe management.

Contact and feedback forms use the same private mail infrastructure. Submissions go to the owner inbox, are not published, and use the sender network address temporarily for rate limiting and abuse prevention.

Salari also keeps a private, owner-only record of your email address, signup page or source, subscription status, timestamps, IP address, approximate country and city, browser and device context, and referrer. This supports abuse prevention, subscription support, attribution, exports and unsubscribe requests. It is not published and remains available until the owner deletes it or the subscriber exercises applicable privacy rights.

Campaign emails can use signed links and a small tracking image to record recipient-level clicks and estimated opens. The private owner report can show the recipient email, event time, clicked destination, mailbox domain, approximate country or city, and a parsed mail-client, browser, operating-system or device category. Email engagement events store a masked network address rather than a new full address or raw browser description. Privacy-enabled mail clients may preload or proxy images, so opens and client location are estimates; clicks are the stronger engagement signal. These campaign events are visible only to the owner.

Interview preparation plan emails can use signed first-party links to record whether the recommendation or optional Brief confirmation was clicked. These emails do not use an open-tracking pixel. Assessment click tracking can be disabled by the owner and applies only to plan emails sent while it is enabled.

The interview preparation questions store your answers (platform, interview date, weakest area, level, the help you asked for and the recommendation) with a random session identifier and no name or email. If you ask for the plan by email, the answers are stored with your address so the plan can be sent. After 30 days the address and the subscriber link are removed from those answers; the answers stay only as an anonymous record.

You can unsubscribe from newsletter emails at any time using the unsubscribe link in the email.

CV scan

The CV scan reads your PDF inside your browser. The file, its name, its text, the target role, the job description, the evidence lines and the term lists are never sent to Salari. When a scan finishes, the site records the score, the status of each check and the type of device, with a masked network address and approximate location.

If you ask for your result by email, the server stores your email address with the result: the score out of 100 and its seven category scores, the status of each of the six checks with its counts and explanation, the suggested next step, whether you ticked The Brief, the email delivery status, a masked network address and the time. It sends one email with the result and a private link. That email is not a subscription. The Brief starts only if you tick its box and confirm it separately.

The result and its link are deleted 30 days after you ask for them, and opening the link does not extend that. The expiry date is shown on the page, in the email and on the result link. Deletion runs automatically every hour.

To limit misuse, one address can receive three scan results a day, and the form is limited per network address.

Book purchases

Book checkout links currently point to Gumroad. Purchases, payment details, tax handling, receipts and file delivery are processed by Gumroad, not directly by this site.

I do not receive your full payment card details from Gumroad.

Private client deliveries

For paid client work, I store the client name, email address, delivery product, private file, expiry and download count so the requested work can be delivered securely. Delivery files are not placed in the public website directory.

Code checks and downloads create a private security log containing the time, event, country, network address and browser description. Network addresses and browser descriptions are removed after seven days; remaining delivery logs are removed after 90 days. Deleting a delivery removes its metadata, log and private file.

Analytics

The site uses Google Analytics and Microsoft Clarity on every page to understand traffic sources, page usage and usability issues. Both may set cookies and keep a session unless you choose Default in the cookie bar, which keeps them in their cookieless consent mode.

The site runs a private first-party operational monitor for public visits. It records the page visited, time, referrer, engagement, a visitor identifier, device/browser category, country code and network address. This is used for live site operations, audience measurement, abuse prevention and diagnosing site problems; it is available only in the protected owner dashboard.

The site also keeps a first-party visitor identifier (a cookie and a browser storage entry that last up to 400 days) and an activity log of pages, clicks and the approximate location derived from the network address, used to understand who uses the products, to run them and to support customers; it is kept up to the retention stated here, and you can ask through the privacy contact below to have it erased.

Full IP addresses, detected city and raw browser user-agent strings remain visible only to the owner. Visitor history is retained until the owner manually deletes it from the protected dashboard. The owner also receives private notifications on his own phone for visits, signups, confirmations, sales, downloads and similar events; each names the email address when the event has one and the city, country, IP address and device of the request that caused it.

Selected actions may create a private owner notification: the first session arrival, a Gumroad checkout click, use of the book decision assistant, opening Find my path, opening a book sample, or using the article audio player. Audio analytics record the article, anonymous visitor identifier and listening time in seconds so aggregate listening hours can be calculated. Apple Push Notification service receives only the event type, action label, page path, browser/operating-system category and referrer needed to deliver that alert; raw IP addresses and full user-agent strings are not included. The supporting notification ledger is retained until the owner manually deletes visitor history.

The homepage conversion report records anonymous first-party events for newsletter submission and acceptance, Find my path use, path selection, product and service interest, and checkout intent. These conversion events do not contain an email address and do not create push notifications. Verified Gumroad purchases are reported separately unless Gumroad supplies a campaign identifier that can be joined safely.

The Study Room has its own first-party record. On the two 24-Hour book pages and the Study Room access page it records the anonymous visitor identifier, the buttons used (the sample, Open the Study Room, buy, Send access code) and the result of each access attempt, with referrer, campaign tags, device category, country, city and the network (IP) address of the request, and the browser and operating system family read from the browser's user-agent string. Inside the room it records which cards were opened, how many answers were written, revealed or marked, whether search was used, the readiness score when the report is opened, and how long the room was open. It never records the text of an answer, a search or a code, and it does not store the full user-agent string. When a purchase code is accepted, these records are linked to that purchase and its email so the owner can see who uses the room and help them. The owner receives a private notification on his own phone for these steps, naming the buyer's email once the purchase is linked, otherwise a short anonymous visitor tag, together with the city, country, IP address, device, browser and traffic source of the request; it never carries answer text, search terms or codes. All Study Room records, including those never linked to a purchase, and these notifications are deleted after two years.

You can choose whether Google Analytics and Microsoft Clarity may set cookies and how long that preference is stored. This choice does not disable the private first-party operational monitor. More details are available on the cookie policy.

When a stored preference expires, the site asks again and removes common analytics cookies it can access.

If you arrive through a link with campaign tags (for example from a LinkedIn post or an issue of The Brief), or from another site, your browser keeps those tags, the referring site's address and the page you landed on for 30 days (the first visit, and separately the most recent one) and adds the source, together with the button you used, to the Gumroad checkout link when you open one. The server records each opened checkout with the product and those tags, without your address or any identifier, and deletes the record after 90 days. When a private checkout discount is issued, the tags are kept with the discount code, so a purchase that uses the code can be counted towards the campaign that brought it.

When you read a book sample in the page viewer, the private monitor records how far you read (for example page 7 of 16) with that page visit.

Contact

For privacy questions, use the contact form.