Privacy Policy
We collect as little data as possible, and we're transparent about every bit of it.
Last updated: September 2026
This policy explains what information TechPastWeek ("we", "us") collects when you use our website at https://techpastweek.com, why we collect it, and your rights.
1. Who is responsible
TechPastWeek is the controller of the personal data described in this policy. You can reach us about anything privacy-related via the contact page.
2. What we collect
We collect very little, by design:
- Newsletter email address. If you subscribe, we store your email to send the weekly briefing. You can unsubscribe at any time with one click.
- Contact form messages. Name, email, and message, used only to respond to you.
- Basic server logs. IP address, user agent, and page requested, kept briefly for security and abuse prevention (for example, rate-limiting forms).
3. What we don't collect
- No advertising cookies, no cross-site tracking, no third-party trackers.
- No behavioral profiling, no "personalized" ad networks.
- No selling or renting of your data — ever.
4. Analytics
We use Cloudflare Web Analytics to understand aggregate traffic — for example, which articles are popular and how fast pages load. It is cookieless, does not fingerprint or identify you, does not track you across sites, and does not store your IP address or any personal identifier; it produces only aggregate, anonymous measurements. Because it collects no personal data, it does not require a consent banner under the GDPR. If we ever add third-party advertising or tracking cookies, we will update this policy and add a consent gate before they load.
5. Why we are allowed to process it (legal bases)
- Newsletter: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time by unsubscribing.
- Contact messages: taking steps at your request before a possible agreement, and our legitimate interest in responding to you (Art. 6(1)(b) and (f)).
- Server logs and form rate-limiting: our legitimate interest in keeping the site secure and available (Art. 6(1)(f)).
6. Third parties and international transfers
We keep third parties to a minimum. Messages sent through our contact form and our newsletter are handled entirely by our own mail server — we do not use a third-party email or newsletter provider for them. The only external processor involved in serving the site is:
- Cloudflare — content delivery, DNS, security and privacy-friendly analytics. It processes request metadata such as your IP address on our behalf.
Cloudflare may process data outside the European Economic Area (for example, in the United States). Where it does, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. We do not sell your data, and we do not share it with advertisers.
7. How long we keep it
- Newsletter: until you unsubscribe, after which your address is removed or suppressed so we don't email you again.
- Contact messages: only as long as needed to handle your enquiry.
- Server logs: for a short period, for security and abuse prevention.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to receive your data in a portable format, and to withdraw consent at any time. To exercise any of these, use the contact page and we'll respond within 30 days. You also have the right to lodge a complaint with your local data protection authority. We do not carry out automated decision-making or profiling.
9. Children
The site is not directed at children under 13, and we do not knowingly collect their data.
10. Changes
If we change this policy materially, we'll update the date above and, where required, notify subscribers by email.