Who is responsible
The data controller is TODO: Your full name, TODO: Street, City, Postcode, United Kingdom. Contact for privacy matters: hello@mactoreality.com.
We follow the UK GDPR and the Data Protection Act 2018. Readers in the EU/EEA have the same rights under the EU GDPR, and the article references below are the same in both.
What we process, why, and on what legal basis
| Purpose | Data | Legal basis (UK/EU GDPR) | Retention |
|---|---|---|---|
| Delivering the website and keeping it secure | IP address, browser user agent, requested URL, time (server logs) | Art. 6(1)(f) — legitimate interest in operating a secure site | Up to 30 days, longer only to investigate abuse |
| Audience measurement | Page views, referrer, device type and country — aggregated, no cookies, no stored IP addresses | Art. 6(1)(f) — legitimate interest in understanding what readers find useful | Aggregated statistics only |
| Weekly newsletter | Email address, sign-up and confirmation time, IP address at confirmation (proof of consent) | Art. 6(1)(a) — consent (double opt-in) | Until you unsubscribe; then a minimal suppression record so we never email you again |
| Answering your emails (tips, corrections, requests) | Name, email address, message | Art. 6(1)(f) — legitimate interest in responding | As long as needed to handle the matter, max. 2 years |
Newsletter details
The newsletter runs on Listmonk, open-source software we host ourselves. Emails are delivered through an email delivery provider acting as our processor. We don't track individual opens or clicks. Every email has an unsubscribe link, and you can also email us to be removed.
Analytics
We use Umami, open-source analytics that we run on our own server — no data goes to a third party. It sets no cookies, doesn't store IP addresses and doesn't build profiles across sites. It only tells us aggregate numbers such as which articles are read.
What we don't do
- No fonts, scripts or embeds are loaded from third parties except those listed here — our fonts are served from our own server.
- No visitor data is sent to AI providers. Our newsdesk uses AI to process public news articles, not information about readers.
- No selling of personal data, and no automated decision-making with legal or similar effects.
Processors and recipients
- Hosting: TODO: hosting provider and country (e.g. Hetzner Online GmbH, Germany)
- Newsletter delivery: our email delivery provider (SMTP), under a data processing agreement
Where data leaves the UK or EU/EEA, we rely on adequacy regulations (such as the UK Extension to the EU–US Data Privacy Framework), the UK International Data Transfer Addendum or Standard Contractual Clauses.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Email hello@mactoreality.com; we answer within one month.
You can complain to the UK Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk. If you live in the EU/EEA, you can also complain to the data protection authority in your country.
Changes
We'll update this page when our processing changes and change the date at the top.