Privacy

Thinking in Margins uses the information you share to read and respond to your messages.

Contact messages

The contact form uses OpenAI’s moderation service and additional automated rules to screen the name and message you submit. Screening can make mistakes, including flagging quotations or descriptions of painful experiences. Your email address is used for replies and, when needed, a private link to add context. Messages sent directly to [email protected] or [email protected] go to iCloud Mail and are not screened by this website workflow.

Messages that pass screening are sent through Resend to the project’s iCloud Mail inbox. Flagged messages, or messages whose screening could not complete, are held in private Cloudflare R2 storage instead of being sent to that inbox. You receive an email with a private link, valid for seven days, to add context. Submitting context sends your explanation, the screening summary, and the original message to the project inbox without another screening check. The private link grants access to your saved message, so please do not forward it.

Held messages can also be accessed through a sign-in-protected review page by Tim and any trusted reviewer explicitly authorized to help. A reviewer can read a held message, send it to the project inbox with a note, or delete it.

Saved website records are removed after 30 days by a daily cleanup task (and may remain until that task runs); successfully delivered message content is removed from that storage sooner. Resend and iCloud may retain emails under their own policies. Correspondence may be kept for reference; you can ask for deletion by emailing [email protected].

Bot protection and website delivery

Cloudflare hosts this website, the artwork delivery service, and the contact and private context pages. The contact form uses Cloudflare Turnstile to check for automated submissions. This check processes technical information about your browser and connection, including your IP address. The contact endpoint also uses your IP address to limit repeated requests.

Screening sends your submitted name and message to OpenAI; it does not send your email address as a separate field. You can read about OpenAI’s API data controls. You can read more in Cloudflare’s Turnstile Privacy Addendum, Resend’s Privacy Policy, and Apple’s Privacy Policy.

Website analytics

The public website uses Cloudflare Web Analytics to understand visits, popular pages, and loading performance. Cloudflare describes this service as cookie-free and says it does not collect or use visitors’ personal data. This analytics service is not added to the private context or message review pages. Learn more about Cloudflare Web Analytics.

Your choices

Please include only information you are comfortable sharing by email. Contact details submitted through this form are not added to a mailing list. To ask about a message you sent or request its deletion, contact [email protected].

Updated October 4, 2026.