Privacy.
This is a small editorial site. The privacy story is short.
What we collect
Nothing automatically. The site has no analytics, no third-party tracking, no advertising network, no fingerprinting. The only thing the server logs are the standard web-server access logs (timestamp, requested page, originating IP, user agent), which are kept for thirty days for the purpose of diagnosing technical problems and are then automatically deleted.
What you can choose to give us
If you write to Ranjith Karunaratne through the contact form, the form sends a single email to the editor and stores nothing in a database. The editor reads the letter, replies if a reply is warranted, and files the correspondence in a personal mail archive that is not shared with anyone.
What we do not do
- We do not sell, rent, or otherwise share any reader data with anyone, ever.
- We do not use cookies, beyond the temporary session cookie that the web server sets and clears at the end of each session.
- We do not embed third-party scripts, social-media trackers, or any other external code that could observe the reader's behaviour.
- We do not maintain an email list, a newsletter, or any other persistent contact mechanism.
The fonts
The site loads two web fonts (Cormorant Garamond and Source Serif Pro) from Google Fonts. Google's font-serving service does, in its delivery, see the requesting IP address. The fonts are loaded once per session and cached locally in the reader's browser thereafter. Readers who prefer not to load fonts from Google may use a browser extension that blocks the request; the site falls back to system serif fonts in that case.
The images
All images on the site are served from the site's own server. Most are reproductions of public-domain photographs from Wikimedia Commons, used under the Creative Commons licences declared on the relevant Commons file pages. The site embeds no images from third-party servers.
Sri Lankan data protection
The Sri Lankan Personal Data Protection Act of 2022 imposes obligations on operators that process personal data. Highland Notes processes no personal data within the meaning of the Act. The web-server logs described above are anonymised by the thirty-day retention policy and are not used for any analytical purpose.
Changes
If the privacy story ever changes, it will change here. There will be no banner, no pop-up, no consent flow. The change will be announced in the next issue of the journal and dated in the footer below.
Questions
Write to journal [at] lk-hn-private [dot] lat. The editor will reply within the week.
Last updated: March 2026. Edited by Ranjith Karunaratne, Hatton.