Privacy

Last updated November 4, 2026.

Short version: we keep what we need to run the page, we don't sell your information, and if you sent something in, you can ask us to take it down any time.

Visiting the site

No hidden ads, no cookies, nothing of ours that follows you around the web. Any link we're paid to post is clearly marked "Sponsored." We use Cloudflare Web Analytics to see how the site is doing, in totals, never individuals. Our pages also note how long a visit lasts, using a temporary tag that's gone when you close the tab: one anonymous record per visit, kept 40 days. No cookies. During the beta, if you ask for a spot, we keep your email so we can send you the link if a spot opens, or tell you when we launch if it doesn't. We also keep any feedback you send, and your name and email if you add them. We delete all of it within 90 days of launch. We don't time visits from the EU, the UK, Switzerland, Norway, Iceland or Liechtenstein. The site's fonts come from our own server. Video posts play through YouTube's privacy-enhanced player, which is YouTube's own and follows YouTube's rules.

Clicks

Every headline goes through a short /out/ link so we can count which stories get read. We count clicks per story, per day, and where they came from (the site, the email digest, Facebook). From the site, we don't record who clicked.

When you send something in

We keep your name, your email, what you wrote, your photos or video, and anything optional you add, like your role, company or social handles. We strip the location data out of photos before anything is stored.

An AI service (Anthropic) reads the photos and words in each submission. It flags what may need a closer look for rights or safety, and drafts a short description of each photo for people using screen readers. It sees your name, the domain of your email (not the full address), what you wrote, and up to ten photos. Videos aren't sent. Its rights and safety notes are only seen by the people who run the site. Its photo descriptions go on the page once a person has approved them.

If we post it, it can go on PA of the Day, our Facebook page, our Instagram page and our email digest. A video you upload or send as a file link can also go on our YouTube channel and social media accounts, and any revenue it earns is kept by PA of the Day to help keep the page running. A Facebook or Instagram link you send can only be reshared on our social media; it doesn't go on the website.

Photos and videos are credited with your real name or anonymously (by name if you have a financial stake). Links are credited with the name you type.

We use your email to confirm we got your submission, to tell you if it posts, and to ask you to confirm it's you when we need to. We never sell your email or show it on the site. The services that run our email and records handle it for that job only.

When you use any form on the site, we briefly use your internet address to stop spam. It's gone after two hours and never saved with your submission or sign-up.

The email digest

If you sign up, we keep your email, your first name, your delivery preferences, and the dates you signed up, paused or left. The email digest is sent through Resend. We count clicks on each story in it, never who clicked. Unsubscribe any time with one tap. We keep your address marked unsubscribed so we never email you again by accident. If you tell us why you're leaving, we keep your note, with your email and first name, for two years, and a copy lands in our desk@ inbox.

How long we keep things

Submissions we turn down: 90 days. Submissions never acted on: 12 months. Photos we pull for safety: 30 days, or three years if the post had already come down. Email digest sign-ups never confirmed: 30 days. Leaving notes: two years. Click details roll into daily totals within days, and the totals stay. A post stays up until someone asks us to take it down. While it's up, we keep its private side too: your email, so we can reach you about it, the original files, and the AI's notes from the rights check. After it comes down, we keep that, and a copy of what ran, for at least three years. Addresses of people who unsubscribed are kept with no end date, so we never email them again by accident.

Taking something down

If you're connected to something a reader sent in, email [email protected] and we'll take it down from our site and our social media. That means you sent it in, you're in it, you took it, it names your company or brand, or you're the parent or guardian of someone in it. Links to it in past emails will stop working too. If it's a news story we linked to, you can still ask, and we'll take a look.

The Facebook years

The archive holds posts from PA of the Day's Facebook years, with their original credit. If one of them is yours and you want it down, email us.

Search engines and AI

Published pages are open to search engines, including AI ones that learn from the web.

Who helps us run it

Cloudflare (hosting and storage), Airtable (our records), Resend (email), Anthropic (the AI read), Google (our desk@ inbox) and GitHub (our code and the Facebook-years archive) help us run the page, and handle your information only for that. What we post on Facebook, Instagram and YouTube follows Meta's and YouTube's own rules. Most of these companies are in the US, so your information may be handled there. We don't sell or rent your information to anyone.

Who runs it, and your rights

PA of the Day is run by Todd Herrbach (doing business as PA of the Day) in Sanford, Florida. We use your information to do what you asked (post what you sent, send the digest), to keep spam out, and to see how the site is doing. Wherever you live, you can ask what we have about you, ask us to fix it or delete it, or tell us to stop using it. A few records stay for the times listed above.

If you ask us to delete it, your files, your email and the AI's notes go. What stays is the record of what ran.

Email [email protected] and we'll answer within 30 days. If you're in the EU, the UK, Switzerland, Norway, Iceland or Liechtenstein and think we got it wrong, you can complain to your country's data protection authority.

Questions

[email protected]. We read everything that comes in.