Privacy Policy
1. Scope and consent
This Privacy Policy governs all data practices of ezrarabin.com (the "Site"). By accessing or using the Site, or by submitting any information to it, you consent to the practices described in this Policy. If you do not agree with this Policy, do not use the Site.
2. Information the Site does NOT collect
The Site is deliberately engineered for data minimization. As of the date above, the Site does not use and does not deploy: cookies of any kind; advertising or marketing technologies; tracking pixels or tags that identify individuals; browser or device fingerprinting; social-media embeds; third-party fonts; or any form of cross-site tracking. Reading this Site creates no personally identifying record of you in the Operator's possession.
3. Information the Site collects
3.1. Subscription email. If, and only if, you voluntarily submit your email address through the subscription form, that address and the date of submission are stored. This is the only personal information the Operator holds about any reader.
3.2. Hosting logs. The Site's hosting infrastructure (Vercel Inc.) automatically maintains standard, short-lived server logs (including IP address, browser type, and pages requested) for security and operational integrity, as substantially all web hosts do. These logs are held by the host under its own safeguards and are not used by the Operator to identify visitors. See Vercel's privacy policy for details.
3.3. Aggregate usage statistics. The Site uses Vercel Web Analytics, a privacy-focused, cookieless measurement service. It counts page views in anonymous, aggregated form (page visited, referrer, approximate country, device category) without cookies, without persistent identifiers, and without tracking visitors across other sites. Individual visitors are not identified and cannot be identified by the Operator from these statistics.
4. Purpose and legal basis of processing
Subscriber emails are processed on the basis of consent (Art. 6(1)(a) GDPR, where applicable), solely to deliver notice of new publications. Hosting logs and anonymous aggregate statistics are processed on the basis of legitimate interest in the security, operation, and improvement of the Site (Art. 6(1)(f) GDPR, where applicable). No processing is performed for advertising, profiling, or automated decision-making of any kind.
5. Storage, security, and location
All traffic to the Site is encrypted in transit (HTTPS/TLS). Subscriber data is stored in a professionally managed database located in the European Union (Frankfurt, Germany), protected by row-level security and access controls, and accessible solely to the Operator. No method of transmission or storage is absolutely secure, and no such guarantee is made; however, industry-standard safeguards are applied, and the minimal scope of data held materially limits any conceivable impact.
6. Retention
A subscriber email is retained only for the duration of the subscription and is permanently deleted upon unsubscription or upon request. Hosting logs are retained briefly by the host per its standard schedule and are not archived by the Operator.
7. Disclosure and sale of data
The Operator does not sell, rent, trade, license, or otherwise disclose personal information to any third party for any purpose. No data is shared for advertising or marketing. The sole parties with technical access are the Site's infrastructure providers (hosting and database), acting as processors bound by their own contractual and statutory obligations. Personal information may be disclosed only if required by valid legal process, and then only to the minimum extent required.
8. Your rights
Subject to applicable law (including the GDPR where it applies), you have the right to: access the personal data held about you; obtain a copy of it; correct it; erase it; restrict or object to its processing; data portability; and withdraw consent at any time without affecting prior processing. Since the only data held is an email address you provided, the practical exercise of every one of these rights is simple and will be honored promptly, normally within days and in any event within thirty (30) days: message me on X or LinkedIn.
9. United States state privacy rights
For residents of California, Virginia, Colorado, Connecticut, Utah, and other US states with consumer-privacy statutes: the Operator does not sell or share personal information as those terms are defined under such statutes, does not process personal information for targeted advertising or profiling, and honors verified requests to know, correct, and delete as described in Section 8. You will not be discriminated against for exercising any right.
10. Children
The Site is not directed at children and the Operator does not knowingly collect information from anyone under 16 years of age (or the higher age of consent where applicable). If you believe a child's email address has been submitted, message me on X or LinkedIn and it will be deleted immediately.
11. International access and transfers
The Site may be accessed worldwide. Subscriber data is stored in the European Union regardless of the reader's location; by subscribing, you consent to your email address being transferred to and stored in the European Union.
12. Future changes to the Site's functionality
Should the Site ever introduce features involving additional data processing (for example analytics, payments, products, or services), this Policy will be amended and posted before such features go live, and the amended practices will apply prospectively only.
13. Changes to this Policy
Material changes will be reflected on this page with an updated date. Continued use of the Site after changes are posted constitutes acceptance of the amended Policy.
14. Contact and complaints
For any privacy matter, including complaints and the exercise of rights: message me on X or LinkedIn. If you consider your concern unresolved, you have the right to lodge a complaint with the supervisory or data-protection authority of your place of residence.