gregory.sh
blog
contact
subscribe

Privacy Policy

Last updated: 21 May 2026

Who I am

This site is run by Theo Gregory. I'm based in the UK. You can .

What data I collect

If you subscribe to my mailing list, I store your email address and the date you subscribed.

I also run Umami, a self-hosted analytics tool, to see which posts people read. It collects page views, referrer URLs, browsers, operating systems, device types and country of origin. It does not use cookies, does not store IP addresses and does not track you across other websites.

Why I collect it

I use your email solely to send you updates about new posts and projects. I use the analytics data, in aggregate, to understand which posts are landing.

How I store it

Your email is stored in Cloudflare KV. Analytics data is stored on a server I run in Germany (EEA). Neither is shared with third parties.

Your rights

Under UK GDPR, you have the right to:

  • Unsubscribe at any time via the link in any email, or on the unsubscribe page
  • Access your data — and I'll confirm what I have
  • Delete your data — unsubscribing removes your email from my list
  • Complain to the ICO if you're unhappy with how I've handled your data

Legal basis

I process your email based on your consent, which you give when you subscribe. You can withdraw consent at any time by unsubscribing.

For analytics, the legal basis is my legitimate interest in understanding which posts people read. The analytics do not use cookies or process personal data, so no consent is required.

Changes

If I make significant changes to this policy, I'll note it at the top. The current version was last updated on 21 May 2026.

privacy