Privacy policy · followthewiatr

Who's the controller

Your data is collected by Klaudia, the author of followthewiatr. Contact: klaudia.debicka@gmail.com.

What I collect

When you sign up for the newsletter: your email address, the page language, and the source you arrived from (which link — e.g. Instagram or a Facebook group). I don't collect your name or any payment details.

Why

To send you the free plan and follow-up emails with specifics about travelling in Indonesia. The legal basis is your consent (GDPR art. 6(1)(a)), given when you sign up.

Who processes the data

Supabase holds the address list (EU servers); Resend sends the emails. Both process the data only to make the newsletter work. I don't sell or share your address with anyone else.

Analytics and advertising

The cookie banner has three categories and everything beyond the necessary ones starts switched off — until you consent, no analytics or advertising script is loaded at all. I count traffic with Vercel Web Analytics: anonymously, no cookies, no cross-site tracking. The Analytics category is PostHog (EU servers) and Google Analytics 4 with Consent Mode v2. The Marketing category is the Meta Pixel and Google Ads measurement: only then do I store the ad click id (gclid, fbclid and the like) and the source you arrived from in first-party cookies, and after a purchase or signup I send Meta and Google a conversion confirmation — the order id, the amount and your email address one-way hashed (SHA-256), never in the clear. The legal basis is your consent (GDPR art. 6(1)(a)). The recipients of that data are Meta and Google.

How to withdraw consent

Any time, and as easily as you gave it. At the bottom of every page there's a “Cookie settings” button — it opens the same panel, where you can switch analytics off, marketing off, or both. The change takes effect immediately, with no reload: PostHog stops collecting, Google gets a “denied” signal, and I delete the measurement cookies set on this domain. Scripts already loaded in this tab only go away once you refresh the page. Withdrawing doesn't undo what happened under the consent beforehand (GDPR art. 7(3)).

Your rights

You can unsubscribe any time — the link is in the footer of every email, or just reply. You have the right to access, correct and delete your data. Email klaudia.debicka@gmail.com and I'll remove it right away.