Privacy Policy

Who is responsible for your data

The data controller is [operator name], [postal address], [contact email].

What data we collect

• Subscription. Your email and a record of your consent.
• Topic suggestions. The text you write and your email, if you give one. Please don't put personal details, account numbers or the contents of documents in the form.
• Bot protection on the form. The topic suggestion form uses Cloudflare Turnstile. When you scroll to the form, your browser contacts Cloudflare's servers; Cloudflare receives technical browser data and your IP address to tell humans from bots, and may store data in your browser for this check. We record the outcome of the check (passed or not, and an error code) alongside your message.
• Technical data. Our hosting provider may briefly record your IP address, the date and the page requested in server logs — for security and to keep the site running.

The Site does not use cookies, analytics or advertising pixels, does not embed videos and does not load fonts from third-party servers. The only exception is the Turnstile check on the topic suggestion form described above, which loads only when you scroll to the form. The only thing stored in your browser is your chosen colour theme (light, dark or match system); it stays on your device and is never sent anywhere.

Why, and on what basis

• The newsletter is based on your consent. We ask you to confirm your subscription via a link in an email.
• Replying about a suggested topic, if you gave an email, is based on your consent.
• Bot protection on the form (Turnstile) is based on our legitimate interest in protecting the Site from spam and abuse.
• Server logs are based on our legitimate interest in security and keeping the site running.

Who receives your data

Data is processed by the services we use: newsletter — [newsletter service], bot protection — Cloudflare (Turnstile); submitted topics are received and stored by Google (Google Apps Script and Google Sheets), hosting — [hosting provider]. We don't sell data or share it with advertisers.

Transfers outside the EEA

If a service is located outside the European Economic Area, data may be transferred there with the safeguards required by law: [transfer mechanism].

How long we keep it

Your subscription address — until you unsubscribe. Suggested topics, together with the bot-check result — [retention period]. An email from the topic form — until we send the notification about the material or until you withdraw consent. Server logs — briefly, under the hosting provider's rules.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, object to processing, get a copy of your data, and withdraw consent at any time. Write to us: [contact email]. If you believe your rights have been violated, you may complain to the data protection authority in your country; in Spain that is the Agencia Española de Protección de Datos (aepd.es).

Security

We choose services with reasonable data protection and collect only what is needed for the purposes above.

Children

The Site is not intended for children, and we don't knowingly collect their data.

Changes

We may update this policy. The date of the last update is shown at the top of the page.

Contact

Questions about data: [contact email].