Privacy policy
What personal data Mostly Microbe collects, why, who processes it for us, and how to use your rights. Last updated: [DATE AT LAUNCH].
Who is responsible for your data
Mostly Microbe is an independent publication run from Spain. The data controller is Mostly Microbe. For anything about your data, write to privacy@mostlymicrobe.com.
The short version
- If you subscribe, we keep your email address so we can send you the newsletter. You can unsubscribe from any email.
- Analytics cookies are only set if you accept them in the cookie banner.
- We don't sell your data, show ads based on it, or collect health information on this site.
What we collect and why
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Your email address, the date and page you signed up from, and your confirmation of the subscription | To send you the newsletter you asked for and prove you asked for it | Your consent (Art. 6(1)(a)) |
| Whether you open our emails and which links you click | To see which topics are useful and keep the list healthy, for example by removing addresses that never open | Our legitimate interest in running the newsletter (Art. 6(1)(f)). You can object at any time. |
| Technical data from your visit (IP address, browser, pages requested), processed by our hosting provider | To deliver the website and protect it from attacks | Our legitimate interest in a secure, working site (Art. 6(1)(f)) |
| Analytics data: pages viewed, approximate location (country or city), device type, how you reached the site, and a random identifier stored in a cookie | To understand which pages are read so we can improve them | Your consent (Art. 6(1)(a)), given in the cookie banner |
| Anything you send when you email us | To answer you | Our legitimate interest in replying (Art. 6(1)(f)) |
We don't collect health data on this website. Community experiments, if we launch them, will have their own notice and ask for your explicit consent first. This site isn't directed at anyone under 16, and we don't knowingly collect their data.
Who processes your data for us
We use a small number of service providers, each bound by a data processing agreement:
- beehiiv (United States): sends the newsletter and stores the subscriber list, including open and click data.
- Cloudflare (United States): hosts the website, delivers pages and blocks malicious traffic.
- Google (United States): provides Google Analytics, only if you accept analytics cookies.
We don't sell your personal data or share it for advertising. We would only disclose it to authorities if the law requires us to.
Transfers outside Europe
These providers may process data in the United States. Transfers rely on the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep it
- Subscriber data: while you're subscribed. When you unsubscribe, we keep only your email address on a do-not-email list so we never write to you by mistake. Ask us to delete that too and we will.
- Analytics data: 14 months, then Google deletes it.
- Hosting logs: as long as Cloudflare needs them for security, typically a few days.
- Emails you send us: as long as needed to deal with your message, and no longer than two years.
Your rights
Under the GDPR and the UK GDPR you can ask to access your data, correct it, delete it, restrict or object to its use, or receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time: unsubscribe from any email, or change your choice under Cookie settings at the bottom of every page. Withdrawing consent doesn't affect what we did before.
Write to privacy@mostlymicrobe.com. We answer within one month. If you're unhappy with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or to the authority where you live (in the UK, the Information Commissioner's Office).
If you're in the United States: we don't sell personal information or share it for cross-context behavioral advertising.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use your email address, we'll tell subscribers by email first.
See also our cookie policy and terms of use.