Privacy Policy
1. Who we are
The data controller is UmTale Lab. For privacy matters contact [email protected].
2. What we process
- Article views (analytics): we count unique views anonymously. No visitor identifier is stored — we use a rotating daily hash computed server-side and never store your IP. This cannot identify you or track you across days.
- Reactions (consent only): if you react, we store a random identifier in your browser to remember your reaction. It is created only after you consent.
- Embedded content (consent only): YouTube, X (Twitter), Instagram load only after you allow it; those services may then receive your IP and set their own cookies.
- Functional preferences: list view and font size stored in strictly necessary cookies.
3. Legal bases & purposes
- Anonymous view analytics — legitimate interest (no identification of individuals).
- Reactions and embedded content — your consent (Art. 6(1)(a) GDPR).
4. Retention
- Raw view records are deleted after 90 days; only an anonymous aggregate counter is kept.
- Reactions are kept indefinitely, but the personal identifier on older reactions (over 365 days) is anonymised — only the reaction itself remains, with no link to you.
5. Processors & third parties
We use AWS (media storage/CDN). Embedded content is served by YouTube/Google, X and Instagram/Meta. Some are located outside the EU/EEA — transfers are covered by Standard Contractual Clauses. (TODO: confirm DPAs/SCCs.)
6. Your rights
You have the right to access, rectify, erase, restrict and object to processing, and to withdraw consent at any time. To withdraw consent for reactions/embeds, click “Decline” in the banner or clear this site’s data in your browser. Contact [email protected].
7. Changes
We may update this policy; the update date is shown above.