THEORY & POLITICS PRIVACY POLICY

Last Updated: June 1, 2026

1. Overview

This Privacy Policy explains how Theory & Politics, operated by Cameron Vaziri and/or Room 2100, LLC (collectively, “Publisher,” “we,” “our,” or “us”), may collect, access, use, disclose, and protect personal information in connection with the Publication hosted on Substack.

Because the Publication operates through Substack, both the Publisher and Substack may process personal information in different roles and for different purposes. This Policy applies to the Publisher’s privacy practices. Substack’s own Privacy Policy governs Substack’s independent processing and platform-level services.

2. Relationship to Substack’s Privacy Policy

Substack states that its Privacy Policy applies where Substack processes personal information as a data controller, and that creators may have their own privacy practices for their use of personal information. Substack’s current privacy practices are described in its Privacy Policy. Your use of Substack may also be governed by Substack’s Terms of Use and related platform policies.

Where Substack controls platform-level processing - including account infrastructure, authentication, subscriptions, recommendations, app functionality, analytics, payment processing, security, cookies, and similar technical services - Substack’s policies govern. This Policy supplements Substack’s policies and describes how the Publisher may use information accessible to the Publisher through Theory & Politics.

3. Information We May Access or Collect

Depending on how you interact with the Publication, we may access or collect the following categories of information:

· Contact information, such as name, email address, or account display name;

· Subscription information, such as free or paid subscription status, subscription tier, renewal status, cancellation status, or engagement with emails;

· Reader interaction data, such as opens, clicks, likes, comments, replies, shares, referrals, survey responses, poll responses, and communications;

· Correspondence, such as emails, direct messages, support requests, feedback, or other communications you send to the Publisher;

· Publication analytics made available by Substack, such as aggregate or individual-level engagement metrics;

· Transaction-related information made available by Substack, such as subscription status and payment history summaries, but generally not full payment card numbers;

· Technical and device information to the extent made available by Substack or service providers, such as IP-derived location, device type, browser type, referral source, or similar log data; and

· Any other information you voluntarily provide to the Publisher.

4. Sensitive Personal Information

The Publisher does not intentionally request sensitive personal information. Please do not submit sensitive information, confidential information, legally privileged material, private third-party information, government identification numbers, health information, precise geolocation, financial account numbers, or other sensitive materials unless specifically requested and legally appropriate.

5. How We Use Information

We may use personal information for the following purposes:

· To publish, distribute, and administer the Publication;

· To send newsletters, posts, updates, administrative notices, and subscriber communications;

· To manage subscriber relationships, access, comments, and community features;

· To respond to inquiries, feedback, requests, or disputes;

· To understand readership, engagement, and content performance;

· To improve the Publication, editorial planning, and reader experience;

· To protect intellectual property, enforce terms, prevent misuse, and maintain records;

· To detect, prevent, and respond to spam, fraud, harassment, unlawful conduct, or security incidents;

· To comply with legal obligations, court orders, platform requirements, and regulatory requests; and

· To establish, exercise, or defend legal claims.

6. Legal Bases for Processing Under GDPR and UK GDPR

Where the GDPR, UK GDPR, or similar laws apply, we may process personal information based on one or more legal bases, including:

· Consent, such as when you subscribe, opt in to communications, or voluntarily provide information;

· Contractual necessity, such as providing subscriber access or administering a paid or free subscription;

· Legitimate interests, such as publishing content, communicating with readers, understanding engagement, protecting intellectual property, preventing abuse, maintaining records, and improving the Publication;

· Legal obligations, such as responding to lawful requests or complying with applicable law; and

· Establishment, exercise, or defense of legal claims.

7. Email Communications and Subscriber Choices

If you subscribe to the Publication, you may receive emails and notifications through Substack, including new posts, updates, administrative messages, and other Publication-related communications. You may unsubscribe or change email preferences using Substack’s unsubscribe or account settings tools, or by contacting us where appropriate.

Even if you unsubscribe from promotional or publication emails, Substack or the Publisher may still send administrative, transactional, legal, or account-related communications where permitted by law.

8. Comments, Replies, and Public Interactions

Comments, replies, likes, notes, profile information, and other interactions may be visible to the Publisher, Substack, other users, or the public depending on your settings and the platform feature used. You should not post information that you want to remain private.

9. Cookies, Analytics, Tracking, and Platform Technologies

Substack may use cookies, pixels, analytics tools, device identifiers, email tracking technologies, and similar technologies in connection with the platform. Those technologies may collect information about your device, browser, reading activity, email engagement, and use of Substack. Substack’s Privacy Policy and cookie-related notices govern Substack’s use of those technologies.

The Publisher may review analytics or engagement information made available by Substack to understand readership and improve the Publication. To the extent the Publisher independently deploys additional analytics, tracking, or embedded tools, those tools should be disclosed in this Policy or in a supplemental notice.

10. How Information May Be Shared

We may share personal information in limited circumstances, including:

· With Substack and platform service providers as necessary to operate the Publication;

· With contractors, professional advisors, legal counsel, accountants, or technical providers who assist the Publisher;

· With law enforcement, courts, regulators, or other parties when required or reasonably believed necessary by law;

· To protect the rights, safety, property, intellectual property, reputation, or security of the Publisher, readers, Substack, or others;

· In connection with a business transfer, restructuring, merger, acquisition, asset sale, or similar transaction involving the Publication or Room 2100, LLC; and

· With your consent or at your direction.

We do not sell personal information in the ordinary sense of exchanging it for money. However, some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly. To the extent any Substack platform activity qualifies under those laws, Substack’s own privacy notices and opt-out mechanisms may apply.

11. Payment Information

Paid subscriptions, if offered, are processed through Substack and/or its payment processors. The Publisher generally does not receive full payment card numbers or full payment credentials. Payment processing and related data handling are governed by Substack’s and applicable payment processors’ terms and privacy policies.

12. International Data Transfers

The Publisher is based in Pennsylvania in the United States. Substack and other service providers may process information in the United States and other countries. If you access the Publication from outside the United States, your information may be transferred to, stored in, or processed in jurisdictions that may not provide the same level of data protection as your home jurisdiction.

Where legally required, the Publisher will seek to rely on appropriate safeguards for international transfers, which may include Substack’s platform arrangements, contractual safeguards, or other legally recognized mechanisms.

13. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including publication administration, subscriber management, communications, legal compliance, dispute resolution, security, intellectual property protection, recordkeeping, and legitimate business purposes.

Substack may retain platform data according to its own retention practices. Deleting or changing your Substack account, subscription, or settings may not automatically delete records maintained by the Publisher where retention is legally permitted or necessary.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about processing. You may also have the right to lodge a complaint with a data protection authority.

California residents may have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including rights to know, access, delete, correct, opt out of certain sales or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights. Because the Publisher may not meet all statutory thresholds for every California privacy obligation, rights will be honored where legally applicable.

To exercise rights related to Substack platform data, you may need to contact Substack or use Substack account tools. To exercise rights related to the Publisher’s use of your information, contact us using the information below.

15. How to Submit a Privacy Request

You may submit privacy requests to: contact@cameronvaziri.com. We may need to verify your identity before responding. We may deny or limit requests where permitted by law, such as where retention is necessary for legal compliance, security, free expression, contractual obligations, dispute resolution, or protection of legal rights.

16. Security

We rely in part on Substack’s technical, administrative, and security infrastructure. We also use commercially reasonable measures appropriate to the nature of the information accessible to us. No online platform, email system, or data transmission is completely secure. You use the Publication and Substack at your own risk.

17. Children’s Privacy

The Publication is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to the Publisher, contact us so we can take appropriate action.

18. Do Not Track and Global Privacy Controls

Some browsers transmit “Do Not Track” or similar signals. Because there is no uniform legal or technical standard for such signals in all contexts, the Publisher may not independently respond to them. Substack may provide its own privacy controls, cookie settings, or opt-out mechanisms through the platform.

19. Third-Party Websites and Embedded Content

The Publication may link to or embed third-party websites, media, social platforms, academic sites, payment services, or other external resources. Third parties may collect information from you independently. Their practices are governed by their own terms and privacy policies, not this Policy.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions are effective when posted or otherwise made available, unless law requires a different effective date or additional notice. Continued use of the Publication after an update means you acknowledge the revised Policy.

21. Contact

Theory & Politics
Operated by Cameron Vaziri and/or Room 2100, LLC
Contact Email: contact@cameronvaziri.com