Privacy policy.

I keep this short and honest. I collect as little as possible, I never sell or share your data, and you can leave at any time. The summary below covers almost everything; the full sections add the legal detail.

1. Who I am (the data controller)

This website is run by Daniele Romagnoli, an individual author based in Italy. I decide why and how your personal data is processed, which makes me the "data controller" under the General Data Protection Regulation (GDPR).

You can reach me about anything in this policy at hello@danieleromagnoli.me.

I am a private individual running a small author newsletter, not a large-scale data operation. Because of that, I am not legally required to appoint a Data Protection Officer, and, as I am established in the EU, I do not need an Article 27 EU representative. You can simply contact me directly.

2. What I collect, and why

There are only a few kinds of data involved, and most of the time it is just your email and first name.

• Newsletter sign-up. When you subscribe, I collect your email address and first name, plus a record that you ticked the consent box and which page you signed up from. I use this to send you the newsletter and, where relevant, to address you by name.
• The free novella. If you sign up through the Close Approach offer, you join the same newsletter and I additionally send you the free novella as a welcome gift. The book itself is delivered through StoryOrigin (see section 6).
• Security and anti-spam data. When the sign-up form is submitted, my server briefly sees your IP address to rate-limit spam and bot submissions, and may record it in short-lived server logs if a submission looks abusive or errors out. This is never sent to my email provider and is not used to identify or profile you.
• Website analytics. I use Vercel Web Analytics, which is cookieless and aggregate: it tells me things like which pages are popular, without building a profile of you or tracking you across sites.

3. The legal grounds I rely on

Under GDPR I only process your data when I have a lawful basis to do so:

• Your consent (Art. 6(1)(a)), for sending you the newsletter and the free novella. Consent is never a condition of using the site, and you can withdraw it at any time.
• My legitimate interests (Art. 6(1)(f)), for keeping the site secure (anti-spam) and understanding, in aggregate, how the site is used. I have weighed these interests against your privacy; because the data is minimal and not used to identify you, the impact is low.

4. How the newsletter works

• Double opt-in. After you sign up, you receive an email asking you to confirm. Nothing else is sent until you click that link, so no one can add you without your say-so.
• One list. Whether you join through the general form or the free-novella offer, you are on the same newsletter list. The novella offer simply also sends you the book.
• Engagement. My email provider (MailerLite) records whether emails are opened and links clicked, so I can keep the newsletter relevant and tidy up inactive contacts. You can opt out by unsubscribing.
• Leaving is easy. Every email has a one-click unsubscribe link. You can also just email me and I will remove you.

5. Who else touches your data

I do not sell or share your personal data for anyone else's marketing. The only third parties involved are the service providers ("processors") that make the site and newsletter work. They act on my instructions under data-processing agreements.

Each provider runs its own privacy program; the links above go to their policies. StoryOrigin is only involved if you actively choose to download the free book.

6. Sending data outside the EU

Your subscriber data (email and name) stays on MailerLite's EU-based servers. Some providers, Vercel for hosting and analytics, and StoryOrigin for novella delivery, are based in the United States, so limited data may be processed there. Those transfers are covered by recognised safeguards: the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, which require comparable protection to GDPR.

7. How long I keep it

• Newsletter data: kept until you unsubscribe or ask me to delete it. I also periodically remove long-inactive subscribers (no opens or clicks for around 24 months).
• Security logs: short-lived and used only to prevent abuse.
• Analytics: aggregate only: it does not retain data that identifies you.

8. Cookies

This site does not set tracking cookies, and it does not store anything in your browser to follow you. The analytics are cookieless and the fonts are served from the site itself, not a third-party network. Because of that, there is no cookie banner: there is nothing to consent to. If that ever changes, I will add a proper consent banner and update this policy first.

9. Your rights

Under GDPR you can, at any time:

• Access the data I hold about you;
• Correct anything inaccurate;
• Delete your data ("right to be forgotten");
• Restrict or object to how I use it;
• Port your data: get a copy in a portable format;
• Withdraw consent: unsubscribe with one click in any email.

I do not use automated decision-making or profiling. To exercise any right, email hello@danieleromagnoli.me and I will respond within a month.

If you are unhappy with how I have handled your data, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali. Wherever you live, for example in the UK, California, or elsewhere, your local law may give you similar or additional rights; you are welcome to contact me the same way and I will honour them.

10. Children

This site and newsletter are meant for adults and are not directed at children. I do not knowingly collect data from anyone under 16. If you believe a child has signed up, email me and I will delete the data.

11. Changes to this policy

If I update this policy, I will change the "last updated" date above. For changes that materially affect subscribers, I will also say so by email.

12. Contact

Questions about your privacy, or any request above? Email hello@danieleromagnoli.me.