Privacy policy

This policy explains how Mavday (“we”, “us”) handles personal data when you visit mavday.com or subscribe to our newsletter. The data controller is Dominik Studzinski, trading as Mavday, 24 Eagle Way, Hatfield, Hertfordshire, AL10 8RE, United Kingdom. Contact us about anything in this policy at hello@mavday.com.

What we collect and why

Advertising: Google AdSense

We use Google AdSense to show ads. Google and its advertising partners may use cookies and similar technologies to show ads, limit how often you see them, measure them and prevent fraud. Where you consent, ads may be personalised based on your interests; without consent, Google may show non-personalised or limited ads, which still use cookies or similar technology for frequency capping, aggregated reporting and fraud prevention where the law allows. Lawful basis: consent (and legitimate interests only where permitted). See how Google uses information from sites that use its services.

Consent for UK and EEA visitors is collected through Google's certified consent management platform, which follows the IAB Transparency & Consent Framework (TCF). You can see the full list of advertising partners and their purposes, and accept or refuse each of them, under “Manage options” in the consent message.

Analytics: Google Analytics 4

Only if you consent, Google Analytics 4 collects usage data such as the pages you view, how you arrived, your device and browser, and your approximate location (derived from your IP address, which GA4 does not store). We use it to understand which articles are useful. Event data is kept for 14 months. Lawful basis: consent.

Hosting and cookieless statistics: Cloudflare

Our site is hosted and protected by Cloudflare, which processes technical data such as IP addresses to deliver the pages and defend against attacks (legitimate interests). We also use Cloudflare Web Analytics, which counts visits without cookies and without collecting personal data.

Our own visit counter

When a page loads, your browser tells our server which page you opened, so we can count visits. Nothing is stored on your device. To count each visitor once per day, our server makes a one-way code from your IP address and browser type, mixed with a random value that is replaced every day and then deleted. That code can't be turned back into your IP address, and we can't link your visits across days. We keep the codes only until the end of the day and store just daily totals after that (legitimate interests: knowing how many people read the site).

If you subscribe, we store your email address, the date and the part of the site you subscribed from. Until our newsletter provider, Buttondown, is connected, this is held in our own database on Cloudflare and used for nothing else. We then move the list to Buttondown, which sends you a confirmation email: nothing else is sent until you confirm (double opt-in). Each newsletter email records whether it was opened or clicked so we can improve it. Lawful basis: consent. Unsubscribe at any time from any email, or ask us to delete your address.

To stop automated signups, we also keep a one-way hash of your IP address for the day you subscribe, salted with a value that is replaced daily. It can't be used to identify you and is deleted the next day.

When you email us

If you contact us (for example at hello@mavday.com or tips@mavday.com), we keep your message and address to reply and to handle any correction or tip. Lawful basis: legitimate interests.

Google (AdSense, Analytics, consent platform) and, through AdSense, its advertising partners listed in the consent message.
Cloudflare (hosting, security, cookieless analytics, email forwarding).
Buttondown (newsletter delivery).

Some of these providers process data outside the UK, for example in the United States. Where they do, transfers rely on safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge. We never sell your data.

How long we keep it

Google Analytics event data: 14 months.
Newsletter: until you unsubscribe, then removed from active lists within 30 days.
Emails to us: as long as needed to deal with your enquiry, then for up to 2 years.
Your consent choice: stored by Google's consent platform for up to 13 months, after which we ask again.

Your rights under UK GDPR

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to send it to you in a portable format. Where we rely on consent, you can withdraw it at any time: for cookies, use “Cookie settings” in the footer; for the newsletter, use the unsubscribe link. Email hello@mavday.com and we'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Children

Our site is written for professionals and isn't directed at children under 13.

Changes to this policy

We'll update the date at the top when this policy changes, and explain significant changes in the newsletter.