This Privacy Policy explains what information we collect when you use stautmaster.com, why we collect it, what we do with it, and the rights you have over your data. We try to be honest and short.
1. Data Controller
The data controller is the Staut Master editorial collective, an unincorporated editorial project based at 22 Pimlico, Dublin 8, D08 PY83, Ireland. Contactable via privacy@stautmaster.com. We do not currently have a designated Data Protection Officer; the editorial lead acts as the privacy contact.
2. Categories of Data Collected
- 2.1 Server logs. When you visit the Site, our hosting provider automatically records your IP address, the URL you requested, the time of the request, and the user agent string of your browser. This is standard server behaviour.
- 2.2 Cookies. See our Cookie Policy. By default we set only essential cookies.
- 2.3 Newsletter sign-ups. If you subscribe to the email dispatch, we collect your email address only.
- 2.4 Contact form & emails. If you contact us, we collect the information you provide (name, email, message body).
- 2.5 Analytics, if enabled. If you opt in to analytics cookies, we collect anonymised, aggregated data about page views, scroll depth, and approximate location at country level.
We do not knowingly collect: payment information, precise geolocation, biometric data, government-issued IDs, sensitive personal information, or data from children under 13.
3. Purposes of Processing & Legal Basis
- Server logs — security, fraud prevention, debugging. Legal basis: legitimate interest.
- Newsletter delivery — sending the email dispatch you signed up for. Legal basis: consent.
- Contact handling — responding to your message. Legal basis: contract / pre-contractual.
- Analytics — understanding which essays land. Legal basis: consent.
- Legal & compliance — meeting tax, audit, or court requests. Legal basis: legal obligation.
4. Third-Party Sharing
We use the following third-party providers:
- Hosting provider — serves the Site to your browser; processes server logs.
- Email service provider — delivers the dispatch newsletter to subscribers (only if you subscribe).
- Analytics provider — collects anonymised analytics (only if you opt in to analytics cookies).
The current list of providers is published in the Cookie Policy table and kept consistent with this section.
We do not sell your personal information. We do not share it for cross-context advertising. See section 7 for your CCPA rights.
5. International Data Transfers
The Site is hosted in the United States. If you visit from outside the United States, your data is transferred to and stored in the US. Where such transfers concern personal data of EU/UK residents, we rely on appropriate safeguards (Standard Contractual Clauses, where applicable).
6. Retention Periods
- Server logs: 90 days, then deleted.
- Newsletter subscriber email: retained while you remain subscribed; deleted within 30 days of unsubscribe.
- Contact-form messages: retained for 24 months after last contact, then deleted.
- Analytics data: 14 months, aggregated.
- Legal/financial records: the period required by California law (typically 7 years).
7. Your CCPA Rights (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act / CPRA:
- Right to Know. What personal information we collect, where we got it, and how we use it.
- Right to Delete. Request deletion of personal information we hold about you.
- Right to Correct. Request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing. We do not sell or share for cross-context advertising; this right is moot in our case but available if our practices change.
- Right to Limit Use of Sensitive PI. We do not collect sensitive PI as defined by the CPRA.
- Right to Non-Discrimination. We will not deny you service or charge different prices because you exercised any of the above rights.
To exercise any of these rights, email privacy@stautmaster.com. We respond within 45 days of a verifiable request.
8. Children’s Data
This Site is intended for adults of legal drinking age. We do not knowingly collect data from children under 13 (COPPA). If you believe a child has submitted personal information, please contact us so we can delete it.
9. “Do Not Sell or Share My Personal Information”
We do not sell or share your personal information for cross-context behavioural advertising. See Cookie Policy — Do Not Sell for the formal opt-out (currently, no action is required as we do not engage in selling/sharing).
10. Security Measures
We use industry-standard technical and organisational measures: HTTPS for all traffic, encrypted storage at rest, access controls, and the principle of least privilege for editorial accounts. No system is perfectly secure; we will notify affected users without undue delay if a breach occurs.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last Updated” date and announced on the Site for at least thirty (30) days.
12. Contact
For privacy-related requests or questions: privacy@stautmaster.com or via the contact form.
Related: Terms of Use · Cookie Policy