privacy policy

what we collect

If you subscribe to the newsletter we hold your email address and the date you signed up. That is the whole record. We do not ask for a name, and we do not buy lists.

The site logs standard request data — IP address, browser, referring page — for a rolling 30 days, so we can tell a real reader from a bot. Nothing in those logs is used to build a profile.

cookies and analytics

No advertising cookies, no third-party trackers, no cross-site pixels. We use a privacy-first analytics tool that counts page views without cookies and without storing anything that identifies you.

Embedded players (YouTube, Spotify) set their own cookies once you press play. Until you do, nothing loads from them.

spam protection

The contact form and the newsletter signup are protected by Cloudflare Turnstile, which works out whether you are a person without making you identify yourself. We run it in invisible mode, so there is no checkbox and nothing for you to click.

To do that it reads a few signals from your browser: your IP address, your user agent, a TLS fingerprint, and which of our forms you are on. Cloudflare states that Turnstile is not used to identify, profile or target anyone, and that it acts as a processor on our instructions. It may set a short-lived cookie to remember that a check has already passed.

It is the only third-party script we load, and it loads on any page carrying the newsletter signup or the contact form, which is most of them. The specifics are in Cloudflare’s Turnstile privacy addendum.

who else sees it

Our newsletter provider and our host process data on our behalf, under contract, inside the EU. We do not sell, rent or trade anything, ever. There is nothing here worth selling.

We will only hand data to an authority where the law obliges us to, and we will tell you unless we are legally barred from doing so.

your rights

Under the GDPR you can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Every newsletter has a one-click unsubscribe, which deletes your address rather than flagging it.

Write to privacy@nakedcinemaclub.com. We answer ourselves, so give us a few days.