followthewiatr · Legal
Privacy policy
Last updated: 1 August 2026
Short and concrete: what data I collect, why, and how to delete it.
Who's the controller
Your data is collected by Klaudia, the author of followthewiatr. Contact: klaudia.debicka@gmail.com.
What I collect
When you sign up for the newsletter: your email address, the page language, and the source you arrived from (which link — e.g. Instagram or a Facebook group). I don't collect your name or any payment details.
Why
To send you the free plan and follow-up emails with specifics about travelling in Indonesia. The legal basis is your consent (GDPR art. 6(1)(a)), given when you sign up.
Who processes the data
Supabase holds the address list (EU servers); Resend sends the emails. Both process the data only to make the newsletter work. I don't sell or share your address with anyone else.
Analytics and advertising
The cookie banner has three categories and everything beyond the necessary ones starts switched off — until you consent, no analytics or advertising script is loaded at all. I count traffic with Vercel Web Analytics: anonymously, no cookies, no cross-site tracking. The Analytics category is PostHog (EU servers) and Google Analytics 4 with Consent Mode v2. The Marketing category is the Meta Pixel and Google Ads measurement: only then do I store the ad click id (gclid, fbclid and the like) and the source you arrived from in first-party cookies, and after a purchase or signup I send Meta and Google a conversion confirmation — the order id, the amount and your email address one-way hashed (SHA-256), never in the clear. The legal basis is your consent (GDPR art. 6(1)(a)). The recipients of that data are Meta and Google.
How to withdraw consent
Any time, and as easily as you gave it. At the bottom of every page there's a “Cookie settings” button — it opens the same panel, where you can switch analytics off, marketing off, or both. The change takes effect immediately, with no reload: PostHog stops collecting, Google gets a “denied” signal, and I delete the measurement cookies set on this domain. Scripts already loaded in this tab only go away once you refresh the page. Withdrawing doesn't undo what happened under the consent beforehand (GDPR art. 7(3)).
Your rights
You can unsubscribe any time — the link is in the footer of every email, or just reply. You have the right to access, correct and delete your data. Email klaudia.debicka@gmail.com and I'll remove it right away.
Saved carts
At your request, we send a saved-order link through Resend. We send one reminder after about 4 hours only if you select the separate, optional consent. This does not subscribe you to our newsletter or require analytics or advertising consent. Before sending, we check for a purchase and previous opt-out. Either email lets you stop future saved-cart messages.
We store your email address, selected product, add-ons, discount code, and the wording and time of consent. We also use a one-way hash of the IP address to limit abuse. The link is valid for 7 days. This feature deletes the cart data, email address and message contents 30 days after saving. We retain one-way hashes needed to honour opt-outs, including links in older messages. This feature description was updated on 19 October 2026.
Google Customer Reviews
After you consent to marketing, we load Google's store widget. Google receives connection information, including your IP address, and may use cookies to display the widget and ads based on previous visits. You can withdraw consent in the footer's cookie settings. If the widget has loaded, the page reloads to end its activity in this tab.
On the confirmation page for a paid and delivered order, you can separately open Google's survey invitation. Only after you click do we share your email, order number, country and delivery date with Google. You then choose in Google's window whether to receive the survey. Declining does not affect your purchase or downloads. This choice is separate from newsletter and saved-cart reminder consent. We do not send card data, download links or download tokens to the programme. Updated on 19 October 2026.