Privacy policy

This is a template written to cover how the site is actually built. Have it reviewed by a lawyer in your jurisdiction before you launch, and update the contact address and company details.

What we collect

If you subscribe to the newsletter: your email address, the page you subscribed from, and the date. That is the whole record.

If you sign in as an editor: your name, email address and profile image, supplied by Google's OAuth sign-in. Passwords are never seen or stored by this site.

Automatically: standard server request logs (IP address, user agent, requested URL), retained for a short period for security and debugging.

We do not collect payment details. We do not sell personal data. We have no interest in building a profile of you.

Cookies

• Essential: a session cookie, set only when an editor signs in to the admin area. Visitors who never sign in are not given one.
• Analytics and advertising: none are set by this site by default. If you add an analytics or advertising provider, list it here and add a consent banner where the law requires one.

Affiliate links may set a cookie on the retailer's domain when you click through. That is the retailer's cookie, governed by the retailer's privacy policy, and it is how the commission is attributed.

Why we are allowed to hold it

• Newsletter: your consent, given when you submitted the form. Withdrawable at any time.
• Editor accounts: necessary to perform the contract of giving you access to the admin area.
• Server logs: legitimate interest in keeping the service secure and working.

How long we keep it

• Newsletter subscriptions: until you unsubscribe.
• Editor accounts: while the account is active, plus a short period afterwards.
• Server logs: a short retention window, then discarded.

Who else sees it

Only the providers needed to run the site: our hosting provider, our database provider, our image CDN, and our email provider. Each processes data on our instructions. We do not sell or rent data to anyone.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to processing, and to complain to a data-protection authority. To exercise any of these, email us and we will respond within the period the law requires.

Unsubscribing is one click from the footer of any email — you do not need to contact us.

Children

This site is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially we will update the date at the top of this page.