FRENPrivacy
Privacy Policy
The data used by the Site, why it is processed and the rights available to you.
1. Who processes your data?
The data controller is the non-professional publisher of Deeply Curious, an individual whose identity has been provided to the hosting provider IONOS. The publisher has chosen to preserve public anonymity under the French framework for non-professional online publishing.
No data-protection officer has been appointed, given the nature and current size of the Site.
Exercise your rights: write to contact@deeply-curious.com or use the Contact. Deeply Curious does not sell readers’ personal data.
2. Data, purposes and legal bases
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Browsing and security | IP address, date, URL, user agent and technical logs | Display the Site, prevent abuse and diagnose incidents | Legitimate interest in securing and administering the Site |
| Public comments | Name or pseudonym, email address, content, date, IP address and user agent | Display and moderate discussions and combat spam and abuse | Legitimate interest in maintaining and protecting the discussion area |
| Message sent to the publication | Name or pseudonym, email address, subject, message and any attachments supplied | Respond to a request and process a correction or proposal | Legitimate interest or pre-contractual steps, depending on the request |
| Active newsletter | Email address, date, status and source of subscription, selected list and technical information needed to manage the subscription | Send the welcome message and requested newsletters, then manage preferences and unsubscribes | Consent |
| Google AdSense and consent management | IP address, technical identifiers, browser, page visited, consent choices and advertising data according to the configuration shown | Collect and store choices, prevent fraud and, once placements are active, deliver, cap, measure or personalise advertising | Consent where required; other bases are stated in the choice interface for each purpose |
The Site offers no reader account or hosted contact form; messages are sent directly by email. The newsletter is active and subscription is immediate after the form is submitted, with no second confirmation email. Open, click and cookie tracking are disabled. Comments are open: every comment is held for manual moderation before publication. The pseudonym and approved comment are public; the email address and technical data are not.
3. Recipients and service providers
Data is accessible only to the publisher and service providers that require it to deliver their service:
- IONOS SARL, for hosting the Site, its technical logs and sending newsletter emails by SMTP;
- WordPress, content-management software installed on the hosting service;
- MailPoet, the active extension used to collect subscriptions, manage lists and unsubscribes, and send requested emails;
- Google Ireland Limited, for Google AdSense and Google’s consent-management platform; the applicable partners and purposes are presented in that interface;
- Google Fonts, whose external font files are still loaded by some pages pending local hosting;
- authorised authorities or advisers where required by law or to defend legal rights.
Current status: Google AdSense code and Google’s consent-management platform are configured. No advertising placement is active as of this update. No separate audience-analytics tool is installed. MailPoet uses basic tracking mode: Deeply Curious measures neither opens nor clicks and does not collect subscriber time zones.
4. Retention periods
- Technical logs: no more than 12 months, unless a security incident or legal obligation justifies longer retention.
- Contact and correction requests: two years after the last exchange, unless evidence or a legal obligation requires longer retention.
- Approved comments: for as long as the article remains published or until a legitimate removal request. Rejected, spammed or trashed comments are periodically deleted.
- Newsletter: until consent is withdrawn or the reader unsubscribes. Messages stop for inactive subscribers after 12 months; their details are deleted or anonymised no later than three years after the last relevant contact, except where limited evidence must be retained.
- Evidence of consent or unsubscription: for as long as needed to demonstrate compliance and defend legal rights.
- Cookie choices: for the period stored by the consent platform; a new choice may be requested when the configuration, partners or applicable rules change.
After these periods, data is deleted, anonymised or separately archived where required by law or litigation.
5. Transfers outside the European Economic Area
Google AdSense, Google’s consent platform and Google Fonts may involve technical data being processed by Google group entities or their service providers, including outside the European Economic Area. Google states that it uses the transfer mechanisms provided by applicable data-protection law. Relevant purposes and partners are described in the consent interface and in Google’s Privacy Policy. This page will be updated if another international provider is added.
6. Your rights
Depending on the processing concerned, you may request access to your data, correction, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing.
To exercise your rights, write to contact@deeply-curious.com. Proportionate identity verification may be requested where there is reasonable doubt. A response is normally provided within one month.
After exercising your rights with the publisher, you may lodge a complaint with the French Data Protection Authority (CNIL) if you believe your rights have not been respected.
7. Security and updates
Deeply Curious applies technical and organisational measures appropriate to the Site’s size: encrypted HTTPS connections, administrative access controls, updates, backups and data minimisation. No system can guarantee zero risk, and any significant incident will be handled under the applicable obligations.
This policy may change as the Site’s tools or applicable rules evolve. The online version states its latest update date.
Last updated: 4 September 2026.
Google Analytics 4 — your choice
Prepared but not activated on the Site; no Analytics measurement currently starts.
With your consent, Google Analytics 4 helps measure page views, visit sources, language and reading engagement. Google Ireland Limited processes technical visit data, including browser/device information and pseudonymous cookie identifiers. No email address, comment, form content, subscriber identifier or user_id is sent by this integration. Private URL parameters are excluded.
The Analytics tag is not loaded before consent. Refusal, an unavailable consent system or an unknown decision keeps it blocked. Consent given before Analytics was disclosed does not automatically enable this new measurement. Signed-in administrators and privacy-choice pages are excluded. Newsletter open/click tracking stays disabled.
Detailed event and user data are retained for two months without renewal on activity. Analytics cookies _ga and _ga_MXN3H78QN6 are limited to six months without automatic renewal. The essential dc_ga4_consent_notice setting records only the notice version and choice, not a visitor identifier, for up to six months. Cookie preferences can be changed, and Analytics consent withdrawn, using the controls at the bottom of the Site. Withdrawal stops future collection and removes this integration’s Analytics cookies; it does not erase past reports automatically.
Google may process data outside the EEA under its applicable data-processing and transfer arrangements. See how Google uses data from sites and Google’s data-processing terms. To exercise your rights, contact contact@deeply-curious.com.
Analytics information updated: 12 October 2026.