Last updated: August 13, 2026
1. Operator and scope
Antony owns and operates antonysisle.com, a personal, poetic, reflective, creative, and technical home. This master policy also covers Antony’s private services under *.antonysisle.com where no more specific notice is published. They are personal deployments for Antony and people he authorises; they are not operated by, affiliated with, supplied to, or provided for BP Debate Union. BPDU-related documents, names, historical data, or former *.bpdebate.club aliases do not establish BPDU ownership, permission, or affiliation.
Privacy and formal legal contact: [email protected].
2. Information handled by the WordPress site
- Visits, analytics, and security: IP addresses or derived identifiers, request time and URL, browser/device data, country/region, referring pages, firewall/login events, diagnostics, aggregate traffic, page performance, outbound-link interactions, and first/last-touch or UTM attribution.
- Accounts, Jetpack, and interaction: WordPress account/profile data, login/session records, comments, Jetpack Comments/Likes/subscriptions, Gravatar requests, event bookings, and moderation records. Jetpack/WordPress.com connectivity may also process or synchronise registered-user identifiers, usernames, email addresses, roles/capabilities, account actions, site content/settings, plugin/theme information, comments and comment-author metadata, successful or failed login-attempt IP/user-agent data, and connected-social-account metadata.
- Podcasts, speakers, and recordings: episode titles, descriptions, audio, artwork, transcripts or show notes, publication status, and RSS/feed metadata; and guest or speaker names, biographies, profile images, voices, recordings, and other material supplied or approved for publication. Published episodes, speaker archive pages, and feed metadata are public. The RSS feed includes a public owner name and contact email for feed-directory and technical purposes.
- Messaging: Better Messages content, participants, timestamps, read/delivery state, attachments, moderation or translation results, and notification or preferred-language settings when used. Messages are not end-to-end encrypted. AI moderation, AI message translation, or voice transcription may transmit relevant message text, images, short context, language information, or voice recordings to Better Messages Cloud.
- Webmention, IndieWeb, IndieAuth, and syndication: source and target URLs, source-page verification requests, fetched source material, author names, profile URLs or images, excerpts, reactions, moderation status, identity URLs, client identifiers, requested scopes, authorisation decisions, token records, and syndication/copy-link metadata. A verified Webmention may be displayed publicly as a comment, reaction, source link, excerpt, or facepile after moderation. Syndication Links can record or display copy links; no independent Syndication Links provider/backlink service is currently configured.
- French learning and game progress: Antony French Starter stores learned vocabulary, quiz scores, streaks, game results, weak-word data, quest state, and theme preference in the visitor’s own browser. That progress is not synchronised to a WordPress account or stored in the site database and is removed when the visitor clears the site’s browser storage.
- Information you actively provide: anything you choose to send through comments, bookings, messages, uploads, email, future forms, account/profile fields, free text, or another channel. No Forminator or WPForms form is currently published, but future forms may collect the fields they display. Avoid unnecessary sensitive information.
3. WordPress providers and features
The site uses WordPress with Cloudflare, Wordfence, WP Statistics, Cookie Notice, Events Manager, Better Messages, Gmail/WP Mail SMTP, IndieAuth, IndieWeb, Webmention, Syndication Links, GTranslate, Jetpack/Automattic services, Seriously Simple Podcasting, Seriously Simple Speakers, Seriously Simple Stats, Podping, Gravatar, Yoast, jsDelivr, and other frontend resources. Providers process information under their own terms where needed to deliver a selected or active function.
Podcast publishing and feed discovery: podcast media and metadata are hosted in this WordPress installation and published through public pages and the public Antony’s Innisfree RSS feed. Speaker names and profile/archive material are public when added. When podcast content is published, Podping may receive the public feed URL at podping.cloud so podcast directories can discover an update; listener IP addresses and local play/download statistics are not sent as part of that notification. No Castos account or token connection, Castos media hosting, or Castos statistics-dashboard transfer is currently configured. A future Castos or other external podcast-hosting connection requires this policy to be reviewed before production use.
Jetpack and Automattic: active features include statistics, WordPress.com synchronisation and JSON API connectivity, comments, Likes, subscriptions, social publishing and sharing, Gravatar/hovercards, image/CDN functions, related content, sign-in, monitoring, Protect/WAF, and other content or security features. Jetpack may synchronise the site, user, comment, login-attempt, and social-connection categories described above to Automattic systems. Authenticated JSON API or WordPress.com management requests may access live site data needed for an authorised feature. Jetpack Search is not currently active. See the Jetpack Privacy Center and Automattic Privacy Policy.
Social publishing and sharing: connected Jetpack Social publishing may send eligible public post titles, excerpts, images, URLs, and connection metadata through Automattic to Facebook, Instagram Business, or LinkedIn. Published links may contain UTM source, medium, or campaign parameters used with referral/visit data to measure traffic. Visitor-initiated Facebook, X, or LinkedIn sharing buttons are separate from automatic publishing and transfer information only when selected by the visitor.
GTranslate: the free translation widget initially uses a locally served interface script. If a visitor chooses another language, the widget may load Google’s translation library, process page text and ordinary request/browser information needed to provide translation, and use a googtrans cookie or session value to remember the selected language. Translation is optional and initiated by the visitor.
Webmention and IndieAuth: receiving a Webmention requires the site to fetch and verify the external source URL; verified source material and author/profile metadata may be moderated and republished with the target content. Sending a Webmention discloses the source and target URLs to the receiving site. IndieAuth processes identity, client, scope, authorisation, and token information needed for a user-directed authorisation.
Better Messages: Better Messages Cloud may process text, images, short conversation context, preferred-language information, or voice recordings for AI moderation, message translation, or voice transcription. Better Messages states that cloud AI content is processed in real time rather than retained as user data, while processed results may be cached for approximately 30 minutes to support callback retries.
4. Private service appendices
Chat
Chat may process accounts, prompts, messages, model/provider selections, generated output, files, knowledge bases, embeddings, agents, session IP/user-agent data, Postgres records, and MinIO objects. Content may be sent to a provider selected or enabled for the request. Gmail is used for configured transactional mail. Chat is Antony’s personal deployment and not the BPDU Lobe Agent or a BPDU service.
Auth
Auth may process identity/account attributes, authentication actions, tokens, sessions, IP addresses, user-agent/request details, and audit records. The observed session cookie can persist for about thirty days. Authentication records have no general automatic deletion period.
Docs
Docs may process authorised users, pages, workspaces, comments, attachments, shares, and session metadata including IP, user agent, and approximate location. Sessions can persist for about ninety days. Public shares may be accessible or search-indexable according to their share setting. Docs is Antony’s personal documentation deployment; BPDU-related material does not make it a BPDU internal system.
Stream
Stream may process authentication data, searches, favourites, playback history, preferences, and information needed to reach external content sources. Its authentication cookie may persist for about seven days. External media sources have their own terms and privacy practices.
Birthday
Birthday publishes browsable static media. Visitors should assume files reachable through its directory listing are public. Cloudflare and server/security logs process ordinary request data.
Deep Research
Deep Research is currently unavailable but residual threads, runs, checkpoints, and operational records may remain for restoration, security, troubleshooting, or later deletion.
5. Cookies, local storage, and analytics
WordPress and the private services use login/session, preference, comment, booking, security, translation, and other functional cookies or local storage. Cookie Notice records acknowledgement for approximately one month and does not provide refusal/revocation controls or technically block WP Statistics, Jetpack Stats, or an optional translation request.
Seriously Simple Stats (podcast): when a podcast media request is counted, the site can store the episode/post identifier, request time, the referrer or detected podcast-client label, and the listener’s IP address in the local WordPress/MySQL database. The request user agent is read for podcast-client classification and bot detection but is not separately stored in the plugin’s statistics table. For IPv4, the plugin replaces the final octet with zero. In the installed version, IPv6 masking may leave a full or nearly full IPv6 address and append .0; the resulting address must not be treated as anonymised. The plugin may also start a temporary PHP session and set a functional cookie such as PHPSESSID while handling a request. These local records are stored on the site’s United States-hosted infrastructure and are separate from WP Statistics and Jetpack Stats.
WP Statistics: the locally operated analytics plugin is configured to hash/anonymise visitor identifiers, respect Do Not Track, omit full user-agent storage, and remove detailed records after approximately 180 days. The policy does not claim a WP Statistics visitor cookie that the current configuration does not set.
Jetpack Stats: Automattic may process IP address, WordPress.com identifier or username when available, user agent, visited URL, referring URL, event time, browser language, country, page/post views, outbound-link interactions, and performance measurements. Site administrators ordinarily receive aggregate reports rather than the directly identifying Stats logs held by Automattic. Automattic controls its own retention under its policies; its current Jetpack Stats documentation states that logs containing directly identifying visitor information are ordinarily retained for 28 days.
French Starter storage: French learning, quiz, game, quest, and theme state is functional browser storage used to restore progress on that browser. It is not synchronised to the server or a user account. Clearing browser storage removes it.
Translation preference: after a visitor selects translation, GTranslate/Google may use the googtrans cookie or session value to remember the source and selected languages. Removing that browser data resets the preference.
Browser controls can block or remove cookies and local storage but may impair site features. Whether an analytics or storage technology requires prior consent depends on the applicable law and context; the acknowledgement banner should not be understood as a technical opt-out control.
6. Purposes, disclosure, and no sale
Information is used to provide requested personal services; operate accounts, messages, translation, bookings, comments, Webmentions, IndieAuth authorisations, social publishing, documents, AI requests, media, and shares; publish and distribute podcasts and public speaker/guest pages; count podcast plays or downloads; remember requested preferences or learning progress; measure site use; secure systems; prevent abuse; diagnose faults; maintain backups and continuity; communicate with authorised users; and protect rights or comply with law. Antony does not sell personal information. Information may be processed by necessary hosting, security, mail, analytics, CDN, identity, translation, social, storage, external-content, and AI/model providers, or disclosed when required by law or necessary to protect people, rights, or infrastructure.
7. Retention
Technically configured periods apply where present, including approximately 180 days for detailed WP Statistics records, 365 days for Better Messages attachments, fourteen days for default IndieAuth tokens, seven days for Stream authentication, thirty days for Auth sessions, and ninety days for Docs sessions. Automattic and other external providers control their own service-side retention under their published terms. Better Messages states that cloud AI retry results may be cached for approximately 30 minutes; this does not replace the site’s separate retention of messages, attachments, moderation/translation results, or transcriptions.
Verified Webmentions are stored and moderated as WordPress interaction/comment records and may remain with the relevant content until rejected, deleted, corrected, or no longer reasonably required. A source author or affected person may request correction or removal. French Starter progress remains in the visitor’s browser until cleared there.
Seriously Simple Stats does not currently enforce an automatic expiry for its podcast play/download records. They are reviewed and deleted manually when no longer reasonably necessary for audience measurement, abuse detection, troubleshooting, disputes, or legal duties. Public podcast episodes, RSS metadata, and speaker/guest pages may remain available as published content or archives until corrected, withdrawn, or deleted; copies already obtained by podcast apps, directories, caches, or other recipients may remain outside Antony’s control.
Other messages, pages, files, shares, AI records, authentication/audit records, server logs, and backups may have no automatic expiry. They are reviewed and deleted manually when no longer reasonably necessary for the service, Antony’s personal records, security, continuity, disputes, backups, or legal duties.
8. Security and international processing
Reasonable access controls, HTTPS, Cloudflare, Wordfence, Jetpack security features, service isolation, and backups are used, but no system is absolutely secure. The infrastructure is located in the United States, and Cloudflare, Automattic, Better Messages Cloud, Google/GTranslate, connected social platforms, and other providers may process data in other locations. This policy does not claim Rainyun hosting, Standard Contractual Clauses, universal compliance, universal encryption at rest, or mandatory administrator 2FA where those facts are not established.
9. Rights, future forms, and changes
Depending on applicable law, you may request access, copying, correction, deletion, restriction, explanation, portability, or withdrawal of consent. This includes requests concerning an approved Webmention, publicly displayed source/profile material, or podcast speaker/guest material, subject to necessary records and copies outside Antony’s control. Browser settings can clear French Starter progress, translation preferences, cookies, and local storage. A future form must state its purpose, required/optional fields, access recipients, retention, and contact; sensitive collection requires a specific necessity/impact notice and separate consent where applicable. Requests may be limited by security, legal, dispute, backup, or necessary personal-record requirements. Policy changes are shown by the date above.
Related legal page: Terms of Use.