If you subscribe, two things are collected: your email address, and the IP address you signed up from, which Buttondown stores to block spam signups.
Cloudflare hosts this site and runs the bot check; Buttondown stores your subscription and delivers the emails.
The emails have no open or click tracking, and every email has an unsubscribe link.
To have your data deleted, write to the address on the About page.