Privacy.
This is a short, honest description of what data this site collects, why, and what your rights are. The site is operated by Andreas Krassnitzer (see legal notice for the full address).
What is collected
Only the data you give the email signup form: your email address. When you submit the form, the following is also stored as proof of your consent: the timestamp of signup, your IP address, and the page you signed up from.
This site sets no cookies. It runs no analytics, no tracking pixels, and no advertising code.
Why it is collected
To send you the letter you signed up for. Nothing else.
Lawful basis (GDPR)
Your consent under Article 6(1)(a) GDPR. You give consent by submitting the signup form and confirming the link in the follow-up email (double opt-in). You can withdraw consent at any time by clicking unsubscribe in any email or by writing to the address below — withdrawal does not affect the lawfulness of processing before withdrawal.
Who processes the data
The email list is operated by Buttondown (Buttondown LLC, USA), acting as data processor under a Data Processing Agreement. Buttondown stores your email and consent metadata to send the letter and to handle unsubscribes. Buttondown's sub-processors include Postmark (ActiveCampaign LLC) for email delivery and AWS for infrastructure. EU data residency is configured where available.
Read Buttondown's privacy policy at buttondown.com/privacy.
Retention
Your email address is kept on the list until you unsubscribe. After unsubscribe, a minimal record is retained on a suppression list for up to 30 days to prevent re-adding you by mistake, then deleted.
Your rights
- Access — request a copy of the data held about you.
- Rectification — correct it.
- Deletion — have it removed.
- Portability — export it.
- Objection — stop processing for direct marketing (this is the unsubscribe link).
- Complaint — file with a supervisory authority in your jurisdiction.
To exercise any right, email krassnitzer.a@gmail.com. I respond personally.
Transfers outside the EU/EEA
Buttondown operates in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) and additional safeguards as documented in Buttondown's DPA.
Server logs
This website is served from a server I operate. The server keeps short-lived access logs (IP, user agent, requested URL, timestamp) for security and debugging, rotated regularly. These logs are not used for analytics or shared with third parties.
Changes
If this policy changes, the version at the top of this page is updated. Subscribers will be notified of material changes in a letter.
Last updated: 2026-05-17