PRIVACY NOTICE · VERSION 2026-10-12
Privacy, without the fog machine.
Angelic Articles is currently a personal, non-commercial publication. It does not sell products or services, run advertising, or use behavioural analytics. This notice explains the data processing that currently occurs and provides a public contact route. If the publication becomes commercial, this notice and the legal notice will be updated before that change.
1. Who is responsible?
Controller: Ángel Álvarez Pascua, operating Angelic Articles as a personal, non-commercial publication.
Email: hello@angelic-articles.com
Country: Spain
This public email is the contact route for privacy requests. A private home address and tax identifier are not published for this current personal, non-commercial scope.
Data protection contact: No data protection officer has been appointed; contact the controller at the email above.
2. What we collect and why
| Activity | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Contact and private feedback | Name or alias, optional email and message. | Respond to a request and protect the service; the controller's final legal basis must be confirmed for its circumstances. | Up to 12 months after the last activity, unless a longer period is needed for a legal claim. |
| Public comments | Name or alias, comment and publication metadata. | Publish the comment at the user's explicit request and moderate abuse. | While published or until a valid removal request, subject to moderation and legal records. |
| Newsletter | Email, confirmation status, consent source/version, delivery and unsubscribe metadata. | Weekly newsletter after affirmative consent and confirmation; consent can be withdrawn at any time. | Pending requests are removed after 30 days. Active records remain while subscribed; unsubscribe records are retained only as needed to honour suppression and legal obligations. |
| Reading preferences | Language, theme, reading controls, saved items and reading position stored locally. | Functional personalisation when you use the relevant reading feature. See the storage notice. | On the device until cleared or the feature removes it. |
| Security and abuse prevention | Request metadata and, when Turnstile is configured, verification metadata and source IP. | Protect forms and the service; legitimate interest/security obligations, limited to what is needed. | Legacy reading events are removed after 90 days; reading progress is removed after 12 months. Provider retention periods must still be confirmed. |
3. Recipients and providers
Data may be processed by the following categories of providers. The exact legal entity, location, contract and transfer safeguard must be maintained in the controller's provider register.
- Cloudflare Workers, Static Assets and D1: hosting, API execution, rate limiting and application database. Data: request metadata, submitted form data, subscriber records and application records. The current D1 inspection reports WEUR as the running region and no jurisdiction restriction; Worker edge processing may still be global. Review the Cloudflare Customer DPA and SCCs before final release.
- Cloudflare Turnstile (optional): abuse prevention on public write endpoints when configured. Data: verification metadata and, when sent by the Worker, source IP. No TURNSTILE_SECRET_KEY is currently listed in the production secret inventory checked on 2026-10-12; if enabled later, update this notice and review Cloudflare safeguards.
- Email delivery provider: confirmation, newsletter and operator notifications. Data: recipient email, message content and delivery metadata. The provider is selected through a secret-backed production setting; its legal entity, region and transfer safeguards must be named before final release.
- Newsletter image CDN (jsDelivr): image delivery inside newsletter emails. Data: recipient mail-client request metadata for newsletter images. the CDN arrangement must be confirmed; self-hosting is preferred.
4. International transfers
Some infrastructure or delivery providers may process data outside the EEA or the United Kingdom. Before final publication, the controller must identify the countries, applicable adequacy decisions or safeguards such as standard contractual clauses, and how users can obtain relevant information.
5. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability or objection, and withdraw consent where processing relies on consent. Send requests to hello@angelic-articles.com. We may ask for information necessary to verify the request and will respond within the applicable legal period.
You may complain to the competent supervisory authority. For a controller established in Spain, this is the Agencia Española de Protección de Datos.
6. Children, profiling and sale
This is a general-audience publication and is not directed at children. We do not intentionally sell personal information or use it for behavioural advertising. We do not make decisions about people using solely automated processing or profiling.
7. Cookies and similar technologies
The public site uses a separate cookies and storage notice. Because this release does not use advertising, behavioural analytics or non-essential tracking, it does not display a consent banner. You can clear first-party storage at any time using your browser's site-data controls.
8. Changes
Last updated: 2026-10-12. We will publish a new version when purposes, providers, storage technologies or legal requirements materially change.