# Privacy The short version: the printable packs ask for nothing, the analytics set no cookies, and the only personal data we hold is an email address you gave us on purpose and can take back in one click. This policy explains what happens to personal data on lanternladder.com under the General Data Protection Regulation (GDPR). ## Who is responsible Lantern & Ladder is the controller of the personal data described here. Our contact details, including the Chamber of Commerce and VAT numbers, are on the [contact page](/contact). For anything about privacy, write to [info@lanternladder.com](mailto:info@lanternladder.com). We are not large enough to be required to appoint a data protection officer, and we have not appointed one. Your email goes to a person who can act on it. ## Downloading a printable pack **Nothing is required and nothing is recorded about you personally.** The free packs at `/p/...` are ordinary files. You click, the PDF downloads. There is no form in front of it, no account, and no email gate. The mailing list is offered on those pages after the download has started, and you are free to ignore it. ## Free coloring pages by email Some book pages offer a few free pages by email. You give an address, we send one email with the pages, and that is all we do with it. **We do not keep the address** unless you also tick the box for the mailing list, which then works as described below. The email goes out through Resend, listed under **Who else touches your data**. The legal basis is your request for the pages, under Article 6(1)(b) GDPR. ## The mailing list If you sign up, we store **your email address**, the date you confirmed it, and whether our emails reach you. Nothing else. We do not ask for your name, your child's name or your child's age. - **Why we may hold it:** your consent, under Article 6(1)(a) GDPR. - **How consent is recorded:** you tick a box, then you get an email asking you to confirm. You are only on the list once you click the link in that email. If you never click, the address is discarded. This is double opt-in and it means an address cannot be added by somebody else. - **What we send:** an email when a new book is ready, once or twice a year. Nothing else, ever. No advertising for other people's products. - **How to leave:** the link at the foot of every email. It works immediately and needs no reply from us. You can also email and ask. - **How long we keep it:** until you unsubscribe, after which the address is deleted within 30 days except for a record that this address asked not to be contacted, which we keep so we do not add it again by mistake. We do not sell, rent, share or trade the list. We do not use it to build profiles, and we do not make any automated decisions about you. ## Analytics, and why there is no cookie banner We use Cloudflare Web Analytics, which counts page views without cookies, without local storage and without a device fingerprint. It records the page address, where the visit came from, the country, and the browser type, and it aggregates all of that. Nothing it collects identifies you or follows you to another website. Our own pages also count a few things people do here: a book's page opened, a buy link clicked, a code printed in a book opened, a free pack or sample downloaded, free pages or a newsletter confirmation sent by email, a newsletter address confirmed, and a personalised book's proof opened. For each we keep what it was, which book and, for a click, which shop, the page it happened on (or the name of the site that sent you there), the country our host already sees for every visit, the language your browser asks websites for first, such as nl-NL, and the social platform you came from (Instagram, TikTok, Facebook) when our link says so or the app's own browser does. We keep no IP address, no email address, no cookie and nothing that identifies you or links one count to another, so a count can never be traced back to you. The counts are stored by Cloudflare, our host. Because nothing is stored on your device and nothing identifies you, there is no consent to ask for under the Dutch Telecommunications Act, which is why this site has no cookie banner. There is nothing to consent to. Every company that sees anything at all is listed under **Who else touches your data**, further down this page. If that list is shorter than you expected, that is the point of it. **This site sets no cookies of its own at all.** A book page opens Amazon on the store for your country. Our host tells the page which country your visit comes from, as it does for every visit, and that is all the page is told; nothing about it is kept. If you pick a different store, your browser remembers that one choice on your device, so the next page opens on it, and nothing else. The same country decides the language you arrive in: a visit from the Netherlands or Belgium that starts on an English page is sent to the same page in Dutch. If you pick a language in the language menu, your browser remembers that one choice on your device and opens the site in it next time. It is not sent to us, and you can change it in the same menu. ## Server logs Our host keeps ordinary request logs, which include IP addresses, so that attacks and faults can be investigated. These are kept briefly and are not used to identify visitors or linked to anything else. The legal basis is our legitimate interest in running a site that stays up, under Article 6(1)(f). ## Keeping the email forms from being misused Each email form sends an email, so we stop anyone using them to flood somebody's inbox. Before an email goes out, Cloudflare Turnstile checks that a person sent the form, and we count how many emails an address has been sent that day and how many requests have come from one connection that hour. The count is kept under a one-way hash of the address and of the IP address, not the addresses themselves, and is deleted when its day or hour is over. The legal basis is the same legitimate interest, under Article 6(1)(f). ## Links to shops Buy links point at Amazon, bol.com and Etsy. Once you are on one of those sites you are subject to their privacy policies, not ours, and they will almost certainly set cookies. We get no data back from them about you. We do not use affiliate tracking links. A buy link passes through this site on its way to the shop, so we can count how often each book is clicked. How that count is kept is under **Analytics, and why there is no cookie banner**. ## Children This site is written for parents and teachers. We do not knowingly collect personal data from children, and we have no reason to: the only thing we collect is an email address from someone buying a book. ## Your rights Under the GDPR you may ask us to: - **See** the personal data we hold about you - **Correct** it if it is wrong - **Delete** it - **Restrict** what we do with it, or **object** to it - **Send it to you** in a portable form - **Withdraw your consent** at any time, which does not affect anything done before you withdrew it Email [info@lanternladder.com](mailto:info@lanternladder.com). We answer within 30 days and we do not charge for it. For the mailing list this is usually faster done yourself with the unsubscribe link. If you are unhappy with how we have handled it, you may complain to your national supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens. ## Changes to this policy If this policy changes we update the date at the top. If a change affects what happens to data you have already given us, we tell the mailing list before it takes effect rather than after. --- Page: https://lanternladder.com/privacy Lantern & Ladder, Utrecht, Netherlands. info@lanternladder.com