Privacy at LoyalFlow

This policy explains what LoyalFlow collects when you read the site or subscribe, why we collect it, and what choices you have. It was last updated on August 5, 2026.

Who is responsible

LoyalFlow is the controller for the personal data described here. Reach us about anything on this page at [email protected].

What we collect and why

When you subscribe, we collect the email address you enter. We use it to create or update your subscriber record and send the magic-link or login email needed to confirm and access that subscription. We rely on your consent for the subscription and related email.

If you accept analytics cookies, Google Analytics 4 collects usage information such as page views, reading and navigation events, approximate location, device and browser information, and identifiers used to distinguish visits. We use this to understand which articles are useful and how the site is discovered. Our legal basis is your consent, and nothing is collected until you give it. We do not send your subscriber email address in analytics events.

We also process the technical information needed to serve and secure the site, such as request and network data. Our legal basis for that processing is our legitimate interest in operating a reliable and secure publication.

Retention

A subscriber record remains in Ghost while it is needed to provide the subscription. Unsubscribing stops subscribed email activity but may leave the member record in Ghost; ask us to erase it if you want the record removed. We do not promise a fixed deletion period that the current stack does not enforce. Service logs and backups may remain until their normal rotation, and Google Analytics retains data according to the retention settings configured in that service. Aggregated reporting may remain after identifiable records are removed.

Cookies and analytics

We ask before we measure. On your first visit a notice offers Accept or Decline, and until you accept, the Google Analytics library is not loaded at all — no analytics cookies are set and nothing is sent to Google. Declining is one click, exactly like accepting.

If you accept, Google Analytics sets first-party cookies to distinguish visitors and sessions. Your choice is remembered in your browser's local storage, which is what lets us avoid asking on every page; we store nothing else there and nothing that identifies you. Choose Cookie settings in the footer to change your mind: that stops analytics immediately, clears the analytics cookies it set, and brings the notice back.

Your choices and rights

You can unsubscribe from subscription email at any time, and withdraw analytics consent at any time from the footer. Withdrawing is as easy as giving consent and does not affect the lawfulness of what happened before you withdrew.

You may also ask what personal data we hold about you, request a copy or correction, object to or restrict processing, or ask us to erase it. Send privacy and data requests to [email protected]. We may need to verify that the address belongs to you before acting on a request.

If you are in the EU, the UK, or Switzerland and you think we have handled your data badly, you can complain to your national data protection authority. You do not need our permission and you do not have to raise it with us first — though we would rather you did, because we can usually fix it faster.