Privacy Policy

This policy explains what personal data this website collects, why, and what rights you have over it, in plain language and in line with the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

This site is operated by Alexandros Tsardoulias ("Alekos", "I", "me"), a solo operator based in Greece (European Union). For anything related to this policy or your data, contact:

alexandrostsardoulias@protonmail.com

2. What data is collected, and why

Contact form

When you submit the contact form, I collect your name, email address, and the details you provide about your inquiry, to reply to you. Submitting the form requires agreeing to this Privacy Policy. Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR), or my legitimate interest in responding to inquiries (Art. 6(1)(f)). If you separately check the newsletter or exclusive offers boxes on the form, your email address is also used for those purposes, on the same consent basis as the newsletter signup described below.

Newsletter / Community waitlist / exclusive offers

If you sign up for the newsletter, whether via the Community page, the popup shown on the blog, a signup block elsewhere on the site, or the opt-in checkboxes on the contact form, I collect your email address and store it with Resend (see "Third parties" below) to send you updates about the Community and, occasionally, related content. Checking "exclusive offers" on the contact form records that preference so I know to follow up with relevant offers directly. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time by unsubscribing or emailing me.

Analytics

This site uses Google Analytics 4 to understand which pages are useful. It only loads after you accept the cookie banner. If you reject or ignore it, no analytics script runs and no analytics cookies are set. IP addresses are anonymized before being processed. Legal basis: your consent (Art. 6(1)(a)).

Strictly necessary storage

A small entry in your browser's local storage remembers whether you accepted or rejected the cookie banner, so you're not asked again on every visit. This is necessary for the site to function as intended and doesn't require consent under the ePrivacy rules.

3. Third parties this data passes through

I use a small number of service providers to run this site. None of them are permitted to use your data for their own purposes.

• Resend (email delivery and newsletter list): processes the data submitted through the contact form and newsletter signup. Based in the United States; data transfers are covered by Standard Contractual Clauses.
• Google Analytics (Google Ireland Limited): processes anonymized usage data, only after you accept cookies.
• Cloudflare: hosts this site and provides its content delivery network and basic security filtering. Sees standard web request logs (IP address, requested page) for anyone visiting the site, as any host would.
• Sanity: hosts the blog content (articles and images). Doesn't receive personal data from visitors; it only stores the content I publish.

4. How long data is kept

Contact form messages are kept for as long as needed to handle the conversation and a reasonable period after, generally no more than 24 months, then deleted. Newsletter email addresses are kept until you unsubscribe or request deletion. Analytics data is retained in Google Analytics according to its standard retention settings.

5. Your rights under GDPR

You have the right to:

• Access the personal data I hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time (this won't affect processing done before the withdrawal)
• Lodge a complaint with your national data protection authority

To exercise any of these, email alexandrostsardoulias@protonmail.com. I'll respond within 30 days.

6. Children

This site isn't directed at children, and I don't knowingly collect data from anyone under 16.

7. Changes to this policy

If this policy changes, the "Last updated" date at the top will change too. Significant changes will be noted here directly.