Privacy policy
What we collect, why, who else processes it, and how to get it deleted. Short version: an email address if you subscribe, a message if you contact us, and coarse page analytics.
Who is responsible
CountingTicks operates Counting Ticks and is the data controller for the personal data described here. For any privacy request, email contact@countingticks.com.
What we collect, and why
| Data | When | Why (lawful basis) |
|---|---|---|
| Email address; optionally a name | You subscribe to the briefing | To send the emails you asked for — consent, which you can withdraw at any time |
| Topic preferences | You choose them when subscribing or in settings | To send only what you asked for — consent |
| Name, email, subject and message | You use the contact form | To answer you — legitimate interest in replying to an enquiry you initiated |
| Account email and authentication data | You create an account or sign in | To operate the account — contract |
| Page path, referrer, user-agent, and a hashed IP address (we store a one-way hash, not the address itself) | You visit a page | To count traffic and see which content is read — legitimate interest in operating and improving the site. No cookie is set for this and we do not build advertising profiles |
| Email delivery events (delivered, bounced, unsubscribed) | We send you an email | To keep the list clean and honour unsubscribes — legitimate interest |
We do not collect payment details, we do not ask for your broker credentials or account numbers, and we do not sell or rent personal data to anyone.
Cookies and similar technology
We use cookies only where they are necessary for the site to function: a session cookie set by our authentication provider when you sign in, and a local preference for the admin interface's light/dark setting. We do not use advertising, retargeting or cross-site tracking cookies, and our page analytics does not rely on a cookie.
Who else processes your data
We use a small number of processors to run the site. Each handles data only on our instructions.
- Supabase — database, authentication and file storage (EU region).
- Vercel — application hosting and content delivery.
- Cloudflare — DNS and network protection for the domain.
- Resend — transactional and newsletter email delivery.
- Anthropic — categorises and summarises third-party news articles. Your personal data is not sent to it. Subscriber emails, contact messages and account data are never used as AI input or for model training.
Some of these providers are established outside the EEA. Where personal data is transferred internationally, it is done under the transfer mechanisms permitted by the GDPR, such as the European Commission's Standard Contractual Clauses.
How long we keep it
- Subscriber records — until you unsubscribe, then removed. An unconfirmed subscription is deleted if not confirmed within 30 days.
- Contact messages — up to 24 months, so we have context if you write again.
- Account data — until you delete the account.
- Analytics events — up to 14 months in aggregate form.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can withdraw consent for emails at any time — every email has a one-click unsubscribe link, and there is an unsubscribe control in your settings. Withdrawing consent does not affect processing that already happened.
Email contact@countingticks.com and we will respond within one month. If you are not satisfied, you can complain to your national data protection authority — in Sweden, the Integritetsskyddsmyndigheten (IMY).
Children
This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Security, and its limits
Data is encrypted in transit, access to the database is restricted by row-level security policies, and administrative access requires authentication. No system is perfectly secure; we cannot guarantee absolute security, and we will notify you and the relevant authority as required by law if a breach affects your data.
Changes
If we change this policy we will update the date at the bottom of this page, and for significant changes we will tell subscribers by email.
Operated by CountingTicks. Last updated 31 July 2026.