Privacy policy

What we collect

• Newsletter signups. Your email address, an optional note on what you collect, the page you signed up from, your consent choice, and the time of signup. We also store a hashed form of your IP address and browser user agent for a limited period to detect abuse.
• Server logs. Our web server and Cloudflare record standard request logs (IP address, URL, user agent, time) for security and troubleshooting.
• Analytics. We do not currently run third-party analytics scripts on this site. If that changes, this policy will be updated first.

What we do not do

• We do not sell, rent, or share your email address with anyone.
• We do not put personal data in URLs or analytics events.
• We do not run advertising trackers.

Why we use it

To send you the emails you asked for, to keep the site secure, and to understand what content is useful. The legal basis is your consent (for email) and our legitimate interest in running a secure website (for logs).

Retention

Signup records are kept until you unsubscribe or ask for deletion. Hashed IP and user-agent values are deleted after 90 days. Server logs rotate on a short schedule.

Your choices

Every email includes an unsubscribe link. You can also email [email protected] to unsubscribe, to ask what we hold about you, or to have it deleted.

Third parties

The site is served through Cloudflare, which processes request data as our provider. Email delivery, once the newsletter launches, will use an email service provider acting on our instructions; we will name it here before the first issue goes out.

Children

CardVolume is written for adults. We do not knowingly collect data from anyone under 16.

Changes

We will update the date at the top when this policy changes and describe material changes in the newsletter.