Latent Threat is a newsletter written by one person. It collects as little as possible, and this page explains exactly what that is.

The short version

  • If you subscribe, I store your email address so I can send you the newsletter. That’s it.
  • I don’t sell, rent or share your email with anyone, and I never will.
  • The site uses no cookies and no advertising trackers.
  • You can unsubscribe at any time with one click, from any email I send.

Who is responsible

Latent Threat is run by Vitor Pinho, who is the controller of the personal data described here. For anything related to your data, contact privacy@latentthreat.dev.

What I collect and why

Your email address. Collected when you subscribe through a form on this site. It’s used for one purpose: sending you the newsletter. The legal basis is your consent, which you give when you subscribe and can withdraw at any time.

Email engagement data. The newsletter platform can record whether an email was opened and which links were clicked. I use this only in aggregate, to understand which pieces are useful, and never to profile individual readers.

Anonymous site analytics. I use Cloudflare Web Analytics to count page views. It doesn’t use cookies, doesn’t track you across sites, and doesn’t identify you personally.

Server logs. Like any website, the servers hosting this site process technical data such as your IP address in order to deliver pages and protect against abuse. This is handled by the hosting provider and isn’t used by me to identify you.

Stored in your browser

The site saves two small pieces of information in your browser’s local storage, only to avoid showing you the subscribe prompt when it isn’t useful:

  • whether you’ve already subscribed
  • whether, and when, you dismissed the subscribe prompt

This data never leaves your device, isn’t sent to me, and isn’t used to track you. You can clear it at any time from your browser settings.

Who processes your data

Two services help run Latent Threat:

  • Buttondown stores subscriber email addresses and sends the newsletter. It’s based in the United States, so your email address is stored there.
  • Cloudflare hosts the site and provides the anonymous analytics described above.

Both act on my behalf and only for these purposes.

How long I keep it

Your email address is kept for as long as you’re subscribed. When you unsubscribe, no further emails are sent. You can ask for it to be deleted entirely at any time.

Your rights

Depending on where you live, and in particular under the EU General Data Protection Regulation, you have the right to:

  • access the personal data I hold about you
  • correct it
  • have it deleted
  • withdraw your consent at any time, by unsubscribing
  • object to or restrict how it’s processed
  • receive a copy of it in a portable format
  • lodge a complaint with your local data protection authority

To exercise any of these, email privacy@latentthreat.dev. I’ll reply within 30 days.

Children

Latent Threat isn’t directed at anyone under 16, and I don’t knowingly collect their data.

Changes

If this policy changes in a way that matters, I’ll say so in the newsletter. The date at the top of this page always shows the latest version.