Privacy Policy

Last updated: December 2, 2025

Summary of key points

  • We collect only name and email to create accounts and send newsletters.
  • Emails are sent using Mailgun (EU region). Mailgun provides aggregated email metrics (opens, clicks).
  • We do not store or use additional personal data.
  • You may unsubscribe or delete your account at any time.
  • Data processing is designed to be GDPR-compliant.
  1. Data controller
    The operator of this blog (the "Controller") determines how and why personal data is processed. Contact details for the Controller are listed on the website.
  2. Data we collect
  • Account information: name and email address (required to create your account and send emails).
  • User-generated content: comments you post publicly on blog posts.
  • Email engagement metrics: Mailgun provides aggregated metrics such as number of emails delivered, opens, and clicks. These metrics are used only to measure newsletter performance and are not used to create additional personal profiles.
  1. How we use your data (purposes and legal bases)
  • Provide the Service: create and manage your account, authenticate access, and enable commenting — lawful basis: performance of a contract and legitimate interest.
  • Communicate with you: send newsletters, new post notifications, and administrative messages — lawful basis: consent (subscription) and legitimate interest for administrative messages.
  • Improve Service and analytics: use aggregated email metrics (opens, clicks) to analyze engagement and improve content — lawful basis: legitimate interest. These metrics are not used to infer or build additional personal profiles.
  • Compliance and legal obligations: respond to lawful requests and prevent abuse — lawful basis: legal obligation and legitimate interest.
  1. Email delivery and Mailgun (EU region)
  • We use Mailgun (EU region) as our email service provider. Mailgun processes email addresses and sends emails on our behalf. Mailgun may collect engagement data (opens and clicks) and report back aggregated metrics.
  • We use Mailgun’s EU region to help meet EU data protection expectations. Mailgun may temporarily process data as required to provide the service; see Mailgun’s privacy documentation for details.
  1. Data retention and deletion
  • Account data (name and email) is retained while your account exists. If you delete your account, your personal data stored by us (name, email) will be removed promptly.
  • Comments you post are public; if you delete your account we will remove your account details. Public comments you authored will be handled per the blog’s published deletion policy (typically removed or anonymized) — the exact behavior is described on the website.
  • Aggregated email metrics are stored for analytics purposes for a reasonable period to measure engagement; these metrics do not identify individuals.
  1. Sharing and disclosures
  • We do not sell personal data.
  • Personal data is shared only with service providers necessary to operate the Service (e.g., Mailgun for email delivery). We provide them only the data necessary to perform their services. Mailgun may process data under its own policies; we use Mailgun’s EU region.
  • We may disclose data to comply with legal obligations or to protect rights and safety.
  1. Your rights (EU/UK General Data Protection Regulation and similar)
    Where applicable, you have the right to:
  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate personal data.
  • Erasure: request deletion of your personal data (you can also delete your account).
  • Restriction and objection: request restriction of processing or object to certain processing on grounds relating to your situation.
  • Data portability: request a machine-readable copy of your personal data.
    To exercise these rights, contact the Controller using the contact information on the website. We will respond in accordance with applicable law.
  1. Security measures
    We implement appropriate technical and organizational measures to protect personal data (e.g., access controls, encryption where applicable). While we strive to protect data, no internet transmission is 100% secure.
  2. Children’s privacy
    We do not impose a minimum age for account creation. If you believe a minor provided personal data and you wish for it to be removed, contact the Controller to request deletion.
  3. International transfers
    Personal data may be processed by service providers operating in the EU (Mailgun EU). If any data is transferred outside your jurisdiction, we will ensure appropriate safeguards as required by law.
  4. Changes to this Privacy Policy
    We may update this Privacy Policy. The "Last updated" date will reflect changes. Continued use after updates constitutes acceptance.
  5. Contact and data requests
    For privacy questions or to exercise your rights (access, rectification, deletion, portability), contact the Controller via the email address listed on the website.