Privacy Policy

Last updated: 22 September 2026

CipherMind is a personal technical blog. This policy explains what data we collect when you subscribe to the newsletter, and your rights under the EU General Data Protection Regulation (GDPR).

Who is the data controller

Anil K, Stockholm, Sweden.
Contact: infinityin.minds@gmail.com

What we collect

When you enter your email into a subscription form, we store:

• Your email address
• A cryptographic hash of your IP address (SHA-256 with a private salt; the raw IP is not stored and cannot be recovered)
• Your browser's User-Agent string
• The timestamp of your subscribe and unsubscribe events

We do not collect your name, address, or any other identifier. The site runs no analytics, tracking pixels, or third-party scripts. One localStorage entry is used to remember your light/dark theme preference; this is strictly necessary for the site to function and is exempt from consent under the ePrivacy Directive.

Why we collect it, and legal basis

Your email is used solely to notify you when a new article is published. The legal basis is your consent (GDPR Art. 6(1)(a)), given when you click Subscribe. You can withdraw consent at any time via the Unsubscribe link in any email or at /unsubscribe/.

We never sell, rent, or share your email with any third party for marketing purposes.

Processors and international transfers

The newsletter database is hosted on Cloudflare D1, provided by Cloudflare, Inc. Cloudflare acts as a processor on our behalf and may process data outside the EEA under Standard Contractual Clauses. See Cloudflare's Data Processing Addendum.

How long we keep your data

We keep your email until you unsubscribe. Unsubscribed rows are retained for 12 months for audit purposes, then permanently deleted. You can request immediate hard deletion at any time via the contact address above.

Security

The site is served over HTTPS and subscriber data is encrypted at rest by Cloudflare.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability and to withdraw consent. To exercise any of these, email infinityin.minds@gmail.com. We aim to respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. The Swedish authority is the Integritetsskyddsmyndigheten (IMY).

Changes

Material changes to this policy will be noted at the top of this page.