Privacy

Last updated 8 September 2026

This is the public page of The Venona Project. It is one page with one form on it. What follows is everything it collects, what happens to that, and who else can see it — described from the site as it is built rather than from a template.

The request form

The form asks for your email address, your firm, and what you would use the reports for. The firm field is optional; the other two are not. Nothing else is collected, and there is nothing on the page that collects anything about you without your typing it.

A submission is sent to us as an email, delivered by Resend. If email delivery is not configured at the time you send it, the submission is written to our server log instead, where only we can read it. Either way it is used to answer you and for nothing else. It is not sold, not shared outside the project, and not added to a mailing list — there is no mailing list.

So that the form cannot be used to send bulk mail, the server counts recent submissions against the sending IP address. That count is held in memory for about a minute and then discarded. It is never written to disk and never attached to your message.

Analytics

We use Google Analytics (measurement ID G-9S3HMXYMJT) to know whether anyone is visiting. It records the pages viewed, an approximate location derived from your IP address, and basic device and browser information. We do not connect any of it to what you send through the form, and we do not use it for advertising. What Google does with it is governed by Google’s privacy policy; if you would rather it collected nothing, Google publishes a browser opt-out, and most content blockers stop it as well.

Cookies

This page sets no cookies of its own. Google Analytics sets its own to recognise a returning visit, and the opt-out above stops them. The one cookie we set anywhere on this domain remembers that a password was entered on the private pages, and you will only ever meet it if we have given you that password.

Who else is involved

Three services, each doing one thing: Vercel hosts the site and keeps the ordinary server request logs any host keeps; Resend delivers the mail the form generates; Google Analytics counts visits. There are no advertising trackers, no social pixels, no embedded third-party content, and no chat widget. The typefaces are served from this domain rather than fetched from anyone else while the page loads.

How long any of it is kept

We keep the emails the form generates for as long as we need them to answer you and to remember who asked — this is a private beta, and the requests are the record of it. Analytics data is kept under Google’s own retention settings. Ask us and we will delete what you sent.

Asking us anything about this

Write to hello@venonaproject.com, or use the form and say what you would like. If this policy changes, the date at the top changes with it.