Privacy Policy
Last updated: 6 October 2026
This policy explains what personal data is collected when you visit sebzuddas.com (“the site”), why, and what your rights are. The site is a personal website run by Sebastiano Zuddas (“I”, “me”), who is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
If you have any questions, email me at sebzuddas@icloud.com.
Summary
- The site has no accounts, no comments and no forms of its own. I do not ask you for personal data directly.
- I use Google Analytics to understand how the site is used.
- The newsletter sign-up is provided by Substack, and the shop is hosted by Ko-fi. Anything you give them is handled under their own privacy policies.
- I do not sell your data.
What is collected, and why
Analytics
The site uses Google Analytics 4, provided by Google. It sets cookies in your browser and collects information such as the pages you view, how you arrived at the site, your approximate location (country or city level, derived from your IP address), and your device and browser type. I only see this in aggregate and use it to understand which writing is useful and how the site performs. I do not use it to identify individual visitors.
Google processes this data on my behalf and may transfer it outside the UK, including to the United States. See how Google uses information from sites that use its services.
You can stop Google Analytics from collecting your data by installing the Google Analytics opt-out browser add-on, or by blocking cookies in your browser settings.
Newsletter
The newsletter sign-up form is embedded from Substack. If you subscribe, your email address is collected and stored by Substack, and I can see it in my Substack account so that I can send you the newsletter. Substack may also set its own cookies when the form is displayed. See the Substack privacy policy.
You can unsubscribe at any time using the link at the bottom of any newsletter email.
Shop
The shop link takes you to my page on Ko-fi. Purchases and donations are made on Ko-fi and paid through its payment providers. I never see or store your card details. Ko-fi shares with me the details needed to fulfil your order, such as your name, email address and what you bought. See the Ko-fi privacy policy.
If you email me, I will receive your email address and whatever you choose to include in your message. I use it only to reply to you and keep it for as long as the conversation is relevant.
Hosting and content delivery
The site is hosted on GitHub Pages. Like any web host, GitHub logs technical information such as your IP address when you request a page, for security and to keep the service running. See the GitHub privacy statement.
Some fonts, scripts and stylesheets are loaded from third-party content delivery networks (jsDelivr and Google Fonts). Your browser connects to those services to fetch the files, which means they receive your IP address.
Embedded content
Some pages embed content from other services, such as YouTube videos. Those services may set cookies and collect data about you when the embedded content loads, in the same way as if you had visited them directly.
Cookies and browser storage
| Name or source | Type | Purpose |
|---|---|---|
_ga, _ga_* (Google Analytics) | Cookie | Distinguishes visitors so that usage statistics can be compiled. Lasts up to two years. |
mode | Session storage | Remembers whether you chose the light or dark theme. Cleared when you close the tab. |
newsletterShown | Session storage | Remembers that the newsletter prompt has already been shown, so you only see it once per visit. Cleared when you close the tab. |
| Offline cache | Service worker cache | Stores copies of pages and assets so that the site loads faster and works offline. |
| Substack, YouTube | Third-party cookies | Set by those services when their embedded content loads. |
You can delete or block cookies and site data at any time through your browser settings. The site will still work.
Legal bases
Under the UK GDPR I rely on:
- Consent for analytics cookies and for sending you the newsletter.
- Contract for fulfilling orders you place through the shop.
- Legitimate interests for running and securing the site and replying to messages you send me.
How long data is kept
Google Analytics data is kept for up to 14 months. Newsletter subscriber details are kept until you unsubscribe. Order records are kept for as long as required for tax and accounting purposes. Emails are kept for as long as they remain relevant.
Your rights
You have the right to ask for a copy of the personal data I hold about you, to have it corrected or deleted, to restrict or object to how it is used, to receive it in a portable format, and to withdraw consent at any time. To exercise any of these rights, email sebzuddas@icloud.com and I will respond within one month.
If you are unhappy with how your data has been handled, you can complain to the Information Commissioner’s Office.
Children
The site is not directed at children under 13, and I do not knowingly collect personal data from them.
Changes to this policy
I may update this policy from time to time. The date at the top of the page shows when it was last changed.