Lantern&Ladder

Privacy

The short version: the printable packs ask for nothing, the analytics set no cookies, and the only personal data we hold is an email address you gave us on purpose and can take back in one click.

Last updated 22 October 2026.

This policy explains what happens to personal data on lanternladder.com under the General Data Protection Regulation (GDPR).

Who is responsible

Lantern & Ladder is the controller of the personal data described here. Our contact details, including the Chamber of Commerce and VAT numbers, are on the contact page. For anything about privacy, write to [email protected].

We are not large enough to be required to appoint a data protection officer, and we have not appointed one. Your email goes to a person who can act on it.

Downloading a printable pack

Nothing is required and nothing is recorded about you personally. The free packs at /p/... are ordinary files. You click, the PDF downloads. There is no form in front of it, no account, and no email gate.

The mailing list is offered on those pages after the download has started, and you are free to ignore it.

Free coloring pages by email

Some book pages offer a few free pages by email. You give an address, we send one email with the pages, and that is all we do with it. We do not keep the address unless you also tick the box for the mailing list, which then works as described below. The email goes out through Resend, listed under Who else touches your data. The legal basis is your request for the pages, under Article 6(1)(b) GDPR.

The mailing list

If you sign up, we store your email address, the date you confirmed it, and whether our emails reach you. Nothing else. We do not ask for your name, your child’s name or your child’s age.

  • Why we may hold it: your consent, under Article 6(1)(a) GDPR.
  • How consent is recorded: you tick a box, then you get an email asking you to confirm. You are only on the list once you click the link in that email. If you never click, the address is discarded. This is double opt-in and it means an address cannot be added by somebody else.
  • What we send: an email when a new book is ready, once or twice a year. Nothing else, ever. No advertising for other people’s products.
  • How to leave: the link at the foot of every email. It works immediately and needs no reply from us. You can also email and ask.
  • How long we keep it: until you unsubscribe, after which the address is deleted within 30 days except for a record that this address asked not to be contacted, which we keep so we do not add it again by mistake.

We do not sell, rent, share or trade the list. We do not use it to build profiles, and we do not make any automated decisions about you.

We use Cloudflare Web Analytics, which counts page views without cookies, without local storage and without a device fingerprint. It records the page address, where the visit came from, the country, and the browser type, and it aggregates all of that. Nothing it collects identifies you or follows you to another website.

Our own pages also count a few things people do here: a book’s page opened, a buy link clicked, a code printed in a book opened, a free pack or sample downloaded, free pages or a newsletter confirmation sent by email, a newsletter address confirmed, and a personalised book’s proof opened. For each we keep what it was, which book and, for a click, which shop, the page it happened on (or the name of the site that sent you there), the country our host already sees for every visit, the language your browser asks websites for first, such as nl-NL, and the social platform you came from (Instagram, TikTok, Facebook) when our link says so or the app’s own browser does. We keep no IP address, no email address, no cookie and nothing that identifies you or links one count to another, so a count can never be traced back to you. The counts are stored by Cloudflare, our host.

Because nothing is stored on your device and nothing identifies you, there is no consent to ask for under the Dutch Telecommunications Act, which is why this site has no cookie banner. There is nothing to consent to.

Every company that sees anything at all is listed under Who else touches your data, further down this page. If that list is shorter than you expected, that is the point of it.

This site sets no cookies of its own at all.

A book page opens Amazon on the store for your country. Our host tells the page which country your visit comes from, as it does for every visit, and that is all the page is told; nothing about it is kept. If you pick a different store, your browser remembers that one choice on your device, so the next page opens on it, and nothing else.

The same country decides the language you arrive in: a visit from the Netherlands or Belgium that starts on an English page is sent to the same page in Dutch. If you pick a language in the language menu, your browser remembers that one choice on your device and opens the site in it next time. It is not sent to us, and you can change it in the same menu.

Server logs

Our host keeps ordinary request logs, which include IP addresses, so that attacks and faults can be investigated. These are kept briefly and are not used to identify visitors or linked to anything else. The legal basis is our legitimate interest in running a site that stays up, under Article 6(1)(f).

Keeping the email forms from being misused

Each email form sends an email, so we stop anyone using them to flood somebody’s inbox. Before an email goes out, Cloudflare Turnstile checks that a person sent the form, and we count how many emails an address has been sent that day and how many requests have come from one connection that hour. The count is kept under a one-way hash of the address and of the IP address, not the addresses themselves, and is deleted when its day or hour is over. The legal basis is the same legitimate interest, under Article 6(1)(f).

Buy links point at Amazon, bol.com and Etsy. Once you are on one of those sites you are subject to their privacy policies, not ours, and they will almost certainly set cookies. We get no data back from them about you. We do not use affiliate tracking links.

A buy link passes through this site on its way to the shop, so we can count how often each book is clicked. How that count is kept is under Analytics, and why there is no cookie banner.

Children

This site is written for parents and teachers. We do not knowingly collect personal data from children, and we have no reason to: the only thing we collect is an email address from someone buying a book.

Your rights

Under the GDPR you may ask us to:

  • See the personal data we hold about you
  • Correct it if it is wrong
  • Delete it
  • Restrict what we do with it, or object to it
  • Send it to you in a portable form
  • Withdraw your consent at any time, which does not affect anything done before you withdrew it

Email [email protected]. We answer within 30 days and we do not charge for it. For the mailing list this is usually faster done yourself with the unsubscribe link.

If you are unhappy with how we have handled it, you may complain to your national supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.

Changes to this policy

If this policy changes we update the date at the top. If a change affects what happens to data you have already given us, we tell the mailing list before it takes effect rather than after.

Who else touches your data

These are the only companies involved, what each one does, and where it is. There are no advertising networks, no trackers and no data brokers.

  • Cloudflare, Inc.

    What it does
    Hosts the site and serves every page and PDF.
    What it sees
    Your IP address and browser details, in request logs kept for security.
    Where
    Servers in the EU, company in the United States.
    Why we may
    Legitimate interest in keeping the site up and unattacked.

  • Cloudflare Web Analytics

    What it does
    Counts page views and what people do here (a buy link clicked, a pack downloaded, a printed code opened), so we know which books people look at.
    What it sees
    Page address, referrer, country, browser; for an action, what it was, the book, the shop, the language of the browser and the social platform. No cookies and no identifier.
    Where
    Servers in the EU, company in the United States.
    Why we may
    Legitimate interest in knowing whether the site works.

  • Cloudflare Turnstile

    What it does
    Checks that an email form was sent by a person and not a script, so nobody can use it to flood an inbox.
    What it sees
    Your IP address and signals from your browser, while you use the form. Used only for that check.
    Where
    Servers in the EU, company in the United States.
    Why we may
    Legitimate interest in keeping the forms from being misused.

  • Resend, Inc.

    What it does
    Sends the emails this site sends itself: the free printable pages you ask for, and the email asking you to confirm the newsletter.
    What it sees
    Your email address, the email sent to it, and whether it was delivered.
    Where
    United States, under the EU Standard Contractual Clauses.
    Why we may
    Your request for the pages, or your consent to the newsletter.

  • Buttondown, LLC

    What it does
    Stores the mailing list and sends the emails.
    What it sees
    Your email address, the date you confirmed, and whether an email bounced.
    Where
    United States, under the EU Standard Contractual Clauses.
    Why we may
    Your consent, which you can withdraw at any time.

Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses.

Complaining

Write to [email protected] first and we will try to put it right. If that does not satisfy you, you have the right to complain to your national supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.