Privacy Policy

Cumulant LLC, a Michigan limited liability company, operates this site. Cumulant Research is the public-facing name used for the company’s research and newsroom work.

If you email Cumulant or propose a collaboration, Cumulant may receive your name, email address, institution, role, links, attachments, message, and other information you choose to provide. The public site does not ask you to create an account or submit payment information.

Do not send trade secrets, material nonpublic information, credentials, financial-account information, health records, student records, or other confidential, regulated, or highly sensitive information unless Cumulant has agreed in writing to an appropriate secure method.

When you request a page, hosting, delivery, analytics, and security infrastructure may process technical information such as your IP address, request time, requested URL, referring page, browser and device information, approximate region, response status, and security signals.

Cumulant currently relies on Netlify for site hosting, Cloudflare for delivery, security, and privacy-focused web analytics, and Google Workspace for email. The site’s primary typeface is packaged with the site rather than requested from Google Fonts by your browser. The restricted review console uses separate authentication tooling and is not part of the ordinary public browsing experience.

Cumulant does not use advertising cookies or cross-site behavioral advertising. Cloudflare Web Analytics uses a browser beacon for aggregate visit and performance measurement and is designed to operate without identifying individual visitors. Infrastructure providers may still use technical mechanisms needed for security, routing, authentication, or service integrity.

Cumulant uses information to deliver and secure the site, prevent abuse, diagnose errors, understand aggregate site performance, respond to inquiries, evaluate proposed research or collaboration, preserve necessary business and research records, enforce site terms, and comply with law.

Cumulant does not use contact information for unrelated marketing without permission.

Information may be processed by service providers that support hosting, security, analytics, authentication, and email, including Netlify, Cloudflare, and Google. Cumulant may also disclose information to professional advisers, a successor to the organization, or authorities when reasonably necessary to comply with law, protect rights or safety, or investigate abuse.

Cumulant does not sell personal information, rent contact lists, share personal information for cross-context behavioral advertising, or carry third-party advertising.

Cumulant keeps information only for a legitimate operational, research-record, security, contractual, or legal need. Retention depends on the nature of the information and the reason it was received. Security and traffic records also follow provider settings and may be preserved when needed to investigate abuse, protect a legal claim, or satisfy an obligation.

Cumulant uses reasonable administrative and technical safeguards appropriate to the limited information it handles, including encrypted web transport and access controls. No internet transmission or storage system can be guaranteed completely secure.

You may ask Cumulant to confirm whether it holds information about you, provide access, correct inaccurate information, or delete information. You may also object to or request limits on certain processing where applicable. Cumulant may need to verify a request, may retain a limited record of it, and may decline a request where law permits or requires.

The site is a general-audience research publication and is not directed to children under 13. Cumulant does not knowingly collect personal information online from a child under 13. If Cumulant learns that it has done so, it will delete the information unless law permits or requires a different response. A parent or guardian may contact Cumulant using the address below.

Because Cumulant does not sell personal information or use cross-site behavioral advertising, there is no sale or targeted-advertising preference to switch off. Cumulant will treat a legally recognized browser privacy signal, including Global Privacy Control where applicable, consistently with this policy. Older Do Not Track signals do not have a uniform legal or technical standard.

Cumulant operates from the United States, and information may be processed in the United States or other locations used by its service providers. Where applicable, processing is based on legitimate interests in operating and securing the site, steps requested before a collaboration, consent, or compliance with legal obligations.

Cumulant may update this policy when its practices, providers, or legal obligations change. Material changes will be posted here with a revised effective date. Cumulant will not apply a materially different use to information already collected without a lawful basis.