— PRIVACY POLICY

Privacy policy.

Last updated: 15 May 2026

The short version

juliafrank.net is a static site. It runs no database, sets no cookies of its own, and uses no analytics. The only personal data this site collects is whatever you choose to send me directly: your email address if you subscribe to the newsletter, and the contents of any message you send me. This page explains what happens with that data and what your rights are under European, Singaporean, and other regimes.

1. Who is responsible (data controller)

The data controller for this site is Julia Frank, a private individual operating juliafrank.net for personal and educational purposes. You can reach me at julia@juliafrank.net. There is no Data Protection Officer; I handle requests myself.

2. What this site collects

2a. Newsletter sign-ups

If you sign up for the newsletter, your email address is sent to Kit (formerly ConvertKit), which manages the subscriber list, delivers emails, and stores the data on my behalf. I do not store your email address anywhere else. You can unsubscribe at any time using the link at the bottom of every email; that removes your address from the list.

2b. Emails you send me

If you email me at julia@juliafrank.net, I receive it via Microsoft 365. The contents and your reply-to address stay in my mailbox.

2c. Server logs

The site is hosted on Cloudflare Pages. Cloudflare keeps standard server logs (IP addresses, timestamps, user agents) as part of its operating infrastructure, primarily for security and abuse prevention. I don't read those logs, and they aren't combined with any other data.

3. Legal basis for processing (GDPR Art. 6)

• Newsletter sign-ups: your consent (Art. 6(1)(a)). You give it when you submit the form. You can withdraw it any time via the unsubscribe link or by emailing me.
• Emails you send me: legitimate interest in responding to correspondence (Art. 6(1)(f)).
• Server logs at Cloudflare: legitimate interest in keeping the site secure and available (Art. 6(1)(f)).

4. What this site does not do

• No Google Analytics, no Plausible, no third-party tracking scripts.
• No tracking cookies set by this site. See the Cookie Notice for what third parties may set.
• No retargeting pixels, no advertising networks.
• No automated decision-making or profiling.
• No selling, renting, or sharing of personal data, ever.

5. Affiliate links

The Resources page includes a small number of links to books on Amazon. Those are affiliate links, which means if you buy something after clicking one, Amazon pays me a small commission at no extra cost to you. I only link to books I've actually used, the affiliate relationship doesn't change which books I recommend, and the price you pay is the same as it would be otherwise. Affiliate links are marked clearly on the Resources page so you can tell them apart at a glance.

6. Third-party services and international transfers

The site relies on a small set of services, each with its own privacy practices. Some of them are based outside the EU, so subscribing or contacting me may involve a transfer of your data outside your home jurisdiction.

• Cloudflare Pages (United States, with a global edge network) — site hosting and DNS. Cloudflare relies on Standard Contractual Clauses (SCCs) for international transfers.
• Kit (United States) — newsletter subscriptions and email delivery. Kit also operates under SCCs for data transferred from the EU/EEA and the UK.
• Microsoft 365 (international) — email at the juliafrank.net domain. Microsoft offers standard EU Data Protection Addenda and the EU-US Data Privacy Framework where applicable.

Each of these handles your data according to its own policy. I have no control over those policies beyond choosing to use the service in the first place.

7. How long data is kept

• Newsletter list: until you unsubscribe, or until I close the list. Unsubscribing removes you immediately on Kit's side.
• Emails you send me: in my mailbox indefinitely unless you ask me to delete them. I can delete on request.
• Cloudflare logs: Cloudflare's own retention schedule (typically days to weeks for raw logs). I don't keep copies.

8. Your rights

Whatever jurisdiction you're in, you can email me at julia@juliafrank.net to exercise any of the rights below. I aim to respond within 30 days and there is no charge.

8a. If you are in the European Economic Area or the UK (GDPR / UK GDPR)

• The right to know whether I hold your data, and to a copy of it (Art. 15).
• The right to correct inaccurate data (Art. 16).
• The right to ask me to delete it (Art. 17).
• The right to restrict or object to processing (Arts. 18, 21).
• The right to receive your data in a portable format (Art. 20).
• The right to withdraw consent at any time, without affecting prior processing (Art. 7(3)).
• The right to lodge a complaint with your local data protection authority. In the EU, your home country's DPA can take a complaint about any controller in the EU; in the UK, the Information Commissioner's Office (ICO).

8b. If you are in Singapore (PDPA)

You have the right to access the data I hold about you and to ask me to correct it. You can also withdraw consent for processing, which for the newsletter means unsubscribing.

8c. If you are in another jurisdiction

Email me anyway. I'll honour the same requests (access, correction, deletion, unsubscribe) regardless of where you're writing from.

9. Children

This site isn't directed at children. I don't knowingly collect data from anyone under 16. If a child has submitted data to me and you're a parent or guardian, email me and I'll delete it.

10. Changes to this policy

If this policy changes, the date at the top will update. Material changes (new services, new categories of data) will be flagged in the newsletter so subscribers see them.

11. Contact

Anything I haven't covered, or anything that doesn't feel right: julia@juliafrank.net.