Privacy
What this site keeps, in plain terms. The short version: very little, and nothing that names you.
Reading
Reading needs no account and sets no cookie. The site runs on Cloudflare, which processes each request (including the address it came from) to deliver the page and protect the site from abuse.
Signing in
If you sign in with GitHub or Google, the site keeps a one-way scrambled form (a keyed hash) of the account number that service gives it. If you sign in by email, it keeps the same kind of hash of your address. Neither can be turned back into your account or address, and no name, picture or address is stored. You appear as "Reader" and a number.
Signing in sets one cookie, which keeps you signed in for up to 30 days. It is used for nothing else. Signing out deletes it, and the server's record of it.
What you add
Links you suggest, review requests, notes to the editor and votes are stored with your reader number. A suggestion is seen by the editor first and by no one else until it is approved; your votes are counted, never shown by name.
Error reports
If you report an error, the report, its sources and, if you give one, your email address are kept so the editor can read and answer it. The address is never published.
Limits
To stop abuse, the site counts sign-in attempts, suggestions and votes per reader and per network address for a short time. Those counts are kept as one-way hashes and deleted after two days.