Privacy
Last updated: October 2, 2026.
This notice explains what personal data dzyza.com processes, why and for how long, and what you can do about it. Questions about it go to mail@dzyza.com.
In short, the site has no ads, third-party trackers or cookies for readers. I count page views without knowing who you are. If you subscribe, I use your address only to send the updates you picked and to handle your subscription.
Reading the site
You can read the site without creating an account. There are no advertising trackers, third-party analytics services or email tracking pixels.
The web server records technical access logs, such as the requested path, IP address, browser, referring page, time and response status. They are used to operate and secure the site. Logs rotate at 20 MB, with up to five rotated files kept. Subscription tokens stay in the fragment of an email link and are not included in ordinary HTTP request URLs.
Page-view counts
The site records aggregate page-view counts to help me understand which writing is read. After a public page loads, the browser sends only its page path to this site. The counter stores a total and a count per public path, plus the date counting began. It does not store individual events, IP addresses, user agents, referrers, visitor identifiers or browsing histories, and does not use cookies, local storage or fingerprinting. Query strings and email-link tokens are excluded. Counts are visible only in the private editor.
Reloads and return visits count again; these are page views, not unique people. Signed-in administrator visits, recognized automated crawlers, subscription pages and missing pages are excluded. Requests carrying Do Not Track or Global Privacy Control are not counted. Aggregate totals may be retained for the life of the site.
Email subscriptions
If you subscribe, the site stores your email address, the update categories you choose, the dates of your request and confirmation, a record of your consent (its text, version and time), private tokens used to confirm, manage or cancel your subscription, and records of emails sent to you. Anti-abuse checks use a temporary IP-based counter that expires after 15 minutes and recent confirmation-request times. Confirmed addresses do not receive repeat confirmation emails. Each address is limited to one confirmation per hour and three per 24 hours, with a site-wide limit of 60 per hour and 200 per 24 hours. The site-wide limit stores only times, without email or IP addresses.
The purpose is to confirm your address and send the categories you choose: new essays, new posts and other site updates. Updates announce new writing on this site and contain no advertising. The basis is your separate newsletter consent, given through an unchecked checkbox and confirmed by email. Updates start only after confirmation. Subscribing is optional. Your address is not published, sold or used for advertising.
When someone confirms a subscription or unsubscribes with a link, I get a short note with the number of subscribers (and, for a new one, the chosen categories), without the address. For these figures the site keeps the times of confirmations and unsubscriptions for 31 days, also without addresses.
Unsubscribing and other requests
You can change your choices or withdraw consent at any time, as easily as you gave it: with the links in every email, the Unsubscribe button of your mail program, or a message to mail@dzyza.com in your own words, in any language. Withdrawal stops future updates; it does not undo messages already sent or affect processing before it. If you did not request a subscription, do not confirm it; you can cancel the request with the unsubscribe link.
Software on the site reads new messages in that mailbox only to recognize requests to unsubscribe and questions about personal data, and stores nothing from other messages. A clear request to unsubscribe from a subscribed address is carried out automatically and confirmed by one last email. A request for a copy of your data is answered automatically, at the address the data is about. Anything unclear, about another address or about changing or limiting your data waits until I read it, and I answer within the time set out under “Your rights”. I am notified of every request and check how it was handled.
Recognition is automated, but it never refuses a request: whatever it cannot read clearly goes to me. There is no profiling and no automated decision that affects you in any other way.
Who else receives the data
A hosting company hosts the site, its records and its mail server on servers in Amsterdam, the Netherlands, and acts on my instructions. The site sends its emails from that server, and the mailbox mail@dzyza.com is kept there, with its messages stored encrypted. No separate email service is involved. Your own email provider handles messages under its own terms. Nobody else receives the data: it is not sold, not shared with advertisers or other authors and not used for targeted advertising.
Where the data is kept
The site's records, its emails and the mailbox are kept on servers in Amsterdam, the Netherlands. For readers in other countries, including the United States, this means their data is transferred to the Netherlands. You can ask me for details of the recipients and transfers.
How long it is kept
Unconfirmed signups are removed from the live list after seven days. Active subscriptions remain until you unsubscribe or ask for deletion. After unsubscribing, inactive records are removed from the live list within 30 days, including subscriber backups and related queued messages. Cleanup runs daily.
Private subscription backups retain at most 20 versions and expire after 30 days; copies kept off the server follow the same 30 days. Email jobs and local test-message files also expire after 30 days, and once a final email or a copy of data has been sent, its record keeps no address. An email asking to unsubscribe and my note on how it was handled are deleted from the mailbox 30 days after the request is carried out; records of handled requests on the site are deleted 30 days after handling. Other correspondence is kept only as long as the conversation needs it. Access-log retention is determined by the bounded rotation described above.
Your rights
Wherever you live, you can ask me:
- whether and how your data is processed, and for a copy of it with its source, purposes, recipients and retention;
- to correct or complete it;
- to erase it, and you can withdraw consent at any time;
- to restrict or block its processing;
- to receive it in a common machine-readable format;
- to stop all email at once.
I do not sell or share personal data, and Global Privacy Control signals are respected.
Write to mail@dzyza.com, or use the links in an email. I answer within 30 days of receiving a request. Answers are free. To protect your data I may ask you to write from the address concerned. You can also complain to the data-protection authority of your country.
Security
Subscriber records are kept on the server and reached only through the password-protected editor, which limits sign-in attempts. Connections use HTTPS, and email between this server and other mail servers is encrypted whenever they support it. Records are written to private files, the application runs in an isolated container without extra privileges, and subscription links keep their tokens out of server logs. Backups, on the server and off it, are limited and private, and notes about requests stay in my own mailbox.
Children
The site is not directed at children. If you are under 16, please do not subscribe. If a child has subscribed, write to me and I will erase the data.
Cookies
Reading the site and subscribing do not require tracking cookies. The private administrator editor uses one essential session cookie, dzyza_admin, for authentication. It expires after eight hours or on sign-out; server restarts also invalidate sessions. It is HttpOnly, SameSite=Strict and Secure on the HTTPS production site.
Changes
Changes to this notice will be published here with an updated date. A materially different use of subscription data will require new consent.