Index
Privacy
Last reviewed 1 August 2026
Privacy
Short version: this site sets no cookies, runs no analytics and loads nothing from anyone else. The only personal data held is what you deliberately send.
Who is responsible
Matt King is the data controller for this site. Contact: matt@mattking.uk.
What is collected, and when
Simply visiting
Nothing that identifies you. No cookies are set, no analytics script runs, and no request leaves this domain. The web server keeps short-lived operational logs containing the requested path, timestamp, response status and a truncated IP address; these exist to spot abuse and outages, are kept for 14 days, and are not used to build a profile.
Subscribing to the newsletter
Your email address, an optional first name, the time you consented, and a one-way hash of your IP address as proof of that consent. Nothing is stored as a subscription until you follow the confirmation link — that is what double opt-in means. The confirmation token is stored hashed; the only copy of the raw token is in the email sent to you.
Lawful basis: consent. Withdraw it with the unsubscribe link in any email, which works in one click and takes effect immediately. Records are deleted 30 days after unsubscribing.
This list carries the newsletter and nothing else. It is separate from any Neuresa product mailing list — subscribing here does not subscribe you there, and the two are never merged.
Sending a message
Your name, email address, optional organisation, and the message itself. Lawful basis: legitimate interest in replying to you. Kept for two years, then deleted, so a thread from last year can be picked up without asking you to repeat yourself.
What is never done
- No advertising, retargeting or profiling.
- No selling, renting or sharing of any address, ever.
- No tracking pixels in emails — open and click rates are not measured.
- No third-party analytics, tag managers, session recorders or heatmaps.
- No affiliate links.
Who else sees it
One category of sub-processor: the email provider that delivers confirmations and newsletter issues (Namecheap Private Email), and the hosting provider running the servers (Hetzner). Both are contractually bound to process data only on instruction. No data is transferred outside the UK or EEA without an adequacy decision or standard contractual clauses in place.
Third-party content
Video on this site is not loaded until you press play. Before that, no request reaches YouTube and it has no way of knowing you visited. Once you press play, YouTube's own terms apply to that playback; the privacy-enhanced youtube-nocookie.com domain is used, which defers cookie setting until playback begins.
Video thumbnails are the one asset loaded from a third party (i.ytimg.com). If that matters to you, the media page can be avoided without losing anything else.
Your rights
Under UK GDPR you may request access to your data, correction, deletion, restriction, portability, or object to processing. Email matt@mattking.uk and you will have a response within 30 days, usually far sooner. There is no charge.
If you are unhappy with the response you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Everything is served over TLS with HSTS. Data at rest is encrypted. Consent tokens and IP addresses are stored only as hashes. Access to the database is limited to the application, over a private network, with no public route in.
Changes
Material changes will be announced in the newsletter before they take effect. The review date at the top of this page is always accurate.
See also the terms of use.