Privacy policy

Last updated: 15 October 2026.

Who runs this site

Firma Handlowa Kram, Poznańska 21, 62-023 Borówiec, Poland, NIP 7773130990. Contact: [email protected].

Hosting

The site is hosted on Cloudflare Pages. Cloudflare processes technical request data (such as IP addresses) to deliver and protect the site, under its own privacy policy. We do not receive or store that data.

Cookies

This site sets no cookies and uses no advertising or cross-site tracking.

Outbound click counting

Links to external sources go through a short redirect (/go) so we can count which stories readers open. For each click we store only: the issue date, the section, the destination URL, the time, and whether the request looked like a bot (plus a coarse bot type). We do not store IP addresses, user-agent strings, cookies or any identifier, so clicks cannot be linked to a person.

The daily email brief is optional and uses double opt-in: after you enter your address we send one confirmation email, and you are only added to the list after you click its link and confirm.

Data stored: your email address, whether you are subscribed or unsubscribed, and the dates you signed up and confirmed. Unconfirmed signups are kept in our Cloudflare D1 database for at most 48 hours and then deleted; after you confirm, the pending record no longer contains your address. To limit abuse we briefly keep a salted one-way hash of the signing-up IP address (never the IP itself) for 24 hours.
Purpose and legal basis: sending you the newsletter you asked for, based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Email processor: addresses and emails are processed by Resend, Inc. (USA) as our processor, under its Data Processing Agreement. Because Resend is based in the United States, transfers are covered by the European Commission's Standard Contractual Clauses (SCCs), and, where Resend is certified, the EU–US Data Privacy Framework. Our sending is configured in Resend's EU (Ireland) region.
Open and click measurement in emails: each newsletter email contains a tiny image (a "pixel") that tells us when it was opened, and its links pass through a short redirect on morningtokens.com (/r/…) that records which link was clicked. The answer buttons of the "How was today's email?" poll are recorded the same way. For each event we store only: the issue date, a pseudonymous subscriber id (a one-way keyed hash of your address, not the address itself), which link or poll answer it was, the time, and whether it looked automated (for example Apple Mail Privacy Protection, which loads images on its own, or a security scanner that checks links). We do not store your IP address or browser/device details, and we do not build profiles across other sites.
- Purpose: to learn which stories and sections readers find useful, improve the brief, and spot delivery problems.
- Legal basis: our legitimate interest in measuring and improving the newsletter (Art. 6(1)(f) GDPR), limited to aggregate, pseudonymous statistics.
- Retention: open, click and poll records are deleted after 13 months at the latest, and immediately when you unsubscribe or object.
- How to object: every email has a "Turn off open/click measurement" link in the footer. One click deletes your existing records and future emails to you will contain no pixel and direct links. You can also block images in your mail app, or email [email protected].
Unsubscribe: every email has a one-click unsubscribe link (and supports your mail app's built-in unsubscribe button). After you unsubscribe you receive no more newsletter emails.
Deletion: to have your address deleted completely, also from Resend, email [email protected]. We keep your data only while you are subscribed, or until you ask us to delete it.

Your rights