Privacy Policy
A quick, plain-language rundown: what data I keep, why, and how you can see or delete it.
Last updated: July 20, 2026
Data controller
The data controller is the creator of Δέσε Κορδόνια.
What data I collect
If you're just browsing the site, I don't ask you for any personal data. The infrastructure providers I use (GitHub Pages, Render, Supabase) may log technical details such as your IP address, as part of the normal operation/security of their servers — I don't have access to those logs and don't use them to identify you. Your "likes" and "saved" articles are stored locally in your browser (localStorage) — they never reach me tied to you, only an anonymous total like count per article.
If you create an account (sign in with an email "magic link", no password), I keep: your email, optionally your name and a short bio if you fill them in, and whether you want to receive the newsletter.
For security, when you take actions on your account (sign in, sign out, change your profile, or delete it), I keep a short security log with your IP address, browser (user-agent), and the type of action — to protect the site from abuse (legitimate interest). This log is kept for up to 6 months and then deleted automatically; if you delete your account, your email is removed from it immediately.
How I use it & legal basis
- To sign you in via email with no password, and to remember your profile details — necessary to provide the account you asked for.
- To send you the newsletter — only with your consent, when you opt in.
I don't sell, share, or use your data for advertising.
How long I keep it
Your account details stay stored for as long as your account is active. If you delete your account, your email, name, bio, and newsletter preference are removed from the database immediately. A minimal entry without your email (e.g. IP address and action type) may remain in the security log for up to 6 months, then it's deleted automatically.
Where it's stored
Everything I use is hosted within the European Union:
- Your account (email, name, bio, newsletter preference): database on Supabase (Frankfurt, Germany).
- The server (API) that manages it: Render (Frankfurt, Germany).
- The security log (IP address, user-agent, action type): in the same Supabase project, auto-deleted after up to 6 months.
- Sign-in & newsletter emails are sent via Resend (Ireland).
- The anonymous like counter, in the same Supabase project — no personal data.
- Traffic is measured anonymously via GoatCounter, with no cookies and no personal data.
Cookies
I only use one strictly necessary session cookie while you're signed in, so I can recognize you. It expires after 7 days or when you sign out. No advertising, profiling, or third-party tracking cookies.
Your rights
- View and edit your details anytime on the "My account" page.
- Delete your account anytime from the same page — this immediately removes your email, name, bio, and newsletter preference from the database; only a temporary entry without your email stays in the security log.
- Unsubscribe from the newsletter via the link in every email.
Contact
For any question about your personal data or this Privacy Policy, you can reach out at hello@desekordonia.com.
Δέσε