Last updated [DD Month YYYY]

Privacy

This page explains what personal data Aurcti collects, why, and what you can do about it. The short version: if you only visit the site, we don’t collect anything about you. If you subscribe, we keep your email address so we can send you occasional notes, until you unsubscribe.

Who we are

Aurcti is operated by [legal name of person or company], [registered address][, company number if applicable]. We are the controller of the personal data described here. You can reach us about anything on this page at [privacy@aurcti.com].

Visiting the site

This site uses no cookies, analytics, advertising or tracking scripts, and loads no third-party fonts or embeds.

Like any website, our hosting provider processes basic technical information to deliver pages and keep the service secure, such as your IP address, browser type and the time of each request. This is held in server logs for a limited period and isn’t used to identify or profile you.

Subscribing to notes

If you subscribe, we use double opt-in:

• When you enter your email address, we send a single confirmation email to it. We don’t store your address at this stage, and the confirmation link expires after 48 hours.
• Only when you confirm do we add your email address to our mailing list, along with the date you subscribed.

We use your email address only to send you notes from Aurcti. We don’t sell it, share it for marketing, or combine it with other data.

[If open and click tracking is turned OFF in Resend:] We don’t track whether you open our emails or click links in them.

[If open and click tracking is turned ON in Resend, use this instead:] Our emails record whether they were opened and which links were clicked, so we can understand what’s useful. You can avoid this by blocking images in your email client.

Our legal basis

• Mailing list: your consent, which you give by confirming your subscription. You can withdraw it at any time by unsubscribing.
• Server logs: our legitimate interest in running a secure, working website.

Who processes your data for us

We use two service providers, who process data on our behalf and under our instructions:

• Vercel Inc. hosts the website and runs the signup form.
• Resend sends our emails and stores the mailing list.

Both are based in the United States, so your data may be processed outside the UK. These transfers are protected by appropriate safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework where the provider is certified. [Confirm which mechanism each provider uses in its data processing agreement.]

How long we keep it

• Unconfirmed signups: not stored by us. Our email provider keeps a log of the confirmation email it sent, for its standard retention period.
• Subscribers: for as long as you’re subscribed. If you unsubscribe, we keep only a record that your address has opted out, so that we never email it again. Ask us and we’ll delete that too.
• Server logs: for our hosting provider’s standard log retention period.

Your rights

Under UK data protection law you can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to give you a copy in a portable format. You can withdraw consent at any time using the unsubscribe link in every email, or by contacting us. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.

Children

Aurcti isn’t directed at children under 13, and we don’t knowingly collect their data.

Changes

If we change how we handle personal data, we’ll update this page and the date at the top. If a change is significant, we’ll tell subscribers by email.