Small print
Privacy
What we collect when you read, subscribe or buy — and what we don’t. Written to be read, not scrolled past.
Last updated 27 September 2026
02The short version
- Your email only if you give it. We use it for Chapter 02, the Playbook and news about it — nothing else.
- No selling, no ad tracking. We don’t sell your data or share it for advertising. There are no ad pixels on this site.
- Analytics respect your browser. Google Analytics and Yandex Metrica don’t load at all if your browser sends Global Privacy Control or Do Not Track.
- Cards never touch us. Payments go through our payment provider; we never see your card number.
- Ask and it’s gone. Write to [email protected] and we’ll show you, correct or delete what we have within 14 days.
03Who we are
veyravos.com is run by the independent studio behind Veyra Vos, a one-person publisher. We decide how the personal data described here is used, which makes us the data controller. The easiest way to reach us about anything on this page is [email protected].
04What we collect and why
Only what’s listed here. We never ask for your name to send the free chapter, and we don’t collect sensitive data or your precise location.
- Email address
- To confirm your sign-up, send Chapter 02, and email you about the Playbook. Legal basis: your consent.
- Where you came from
- The link tags (like
utm_source) or referring page at the moment you sign up, stored with your email, so we know which of our posts are useful. Legal basis: our legitimate interest. - Sign-up times
- When you signed up, confirmed or unsubscribed — the proof of consent that anti-spam laws ask for.
- Hashed IP
- A one-way hash of your IP address, kept for 24 hours to stop form abuse (no more than five sign-ups an hour from one address). It can’t be turned back into your IP.
- Purchase
- Your name, email, country and order details, passed to us by the payment provider, so we can deliver the PDF and its updates, answer support and handle refunds. Legal basis: our contract with you, and tax law.
- Server logs
- Our web server and Cloudflare record IP address, time, page and browser for every request — for security and fixing errors. Logs are rotated and deleted automatically.
- Analytics
- How pages are used — see Analytics and cookies.
05Emails
After you sign up we send one email asking you to confirm. Nothing else arrives until you do. After that we write only about the Playbook: the free chapter, a short series of emails over the next two weeks with methods from the book and an offer to buy it, and later new editions and what’s in them. If you buy the book, the offers stop.
Links in our emails pass through our own site, so we can count which email was useful and which one led to a purchase. We don’t use tracking pixels, so we don’t know whether you opened an email.
Every email has a one-click unsubscribe link. Unsubscribing stops all emails immediately. Emails are sent from our own mail server; your address is never uploaded to a mailing service or shared with anyone.
06Payments
When you buy the Playbook, the payment is handled by the payment provider named on the checkout page, under its own privacy policy. They collect your payment details; we receive only what’s listed under “Purchase” above. We never see or store card numbers.
07Analytics and cookies
We use two analytics tools to see which pages and posts are useful. They load after the page does, and not at all if your browser sends Global Privacy Control or Do Not Track.
- Google Analytics 4 (Google LLC) — pages viewed, traffic sources, device type, rough location. Google Analytics 4 doesn’t log or store IP addresses. Cookies:
_ga,_ga_*. Google Privacy Policy. - Yandex Metrica (Yandex LLC) — similar statistics, a click map and session replays (Webvisor) that show scrolling and clicks. The email field is excluded from replays. Cookies:
_ym_uid,_ym_d,_ym_isadand similar. Yandex Privacy Policy.
We don’t use advertising cookies, retargeting or social media pixels, and our own code sets no cookies. You can also block both tools with any content blocker, the Google Analytics opt-out add-on or the Yandex Metrica opt-out.
08Our social accounts and their APIs
We publish our videos and pins to our own accounts on YouTube, Instagram, Facebook, Threads and Pinterest through their official APIs, using our app “VOS”. The only accounts connected to it are our own. We don’t offer sign-in with these services and we don’t collect data about people who watch, like or comment on our posts.
For our own accounts we store access tokens, account and page IDs and names, and the IDs of posts we publish. They’re kept on our server with restricted access and used only to publish our posts, add the first comment and check that a post went live.
Our app uses YouTube API Services. By using features that rely on them you’re also covered by the Google Privacy Policy, and you can revoke any app’s access to a Google account at myaccount.google.com/permissions. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
To remove data connected through Meta, follow the steps for Facebook and Instagram or Threads, or simply write to [email protected].
09Where your data lives
On our own server in Helsinki, Finland — inside the European Union — hosted by Hetzner. Cloudflare sits in front of the site to deliver pages and block attacks. Google, Yandex and the payment provider may process data in other countries under their own safeguards, such as the EU Standard Contractual Clauses.
10How long we keep it
- Email and sign-up details — until you unsubscribe. Ask, and we delete the record completely.
- Hashed IP — 24 hours.
- Purchase records — as long as tax and accounting law requires, then deleted.
- Server logs — rotated and deleted automatically.
- Analytics — under Google’s and Yandex’s retention settings.
11Your rights
Wherever you live, you can ask us to show you the data we have about you, correct it, delete it, send it to you in a portable format, or stop using it. You can withdraw consent at any time — unsubscribing does that for email.
If you’re in the EU, UK or a similar jurisdiction, you can also object to processing based on legitimate interest and complain to your data protection authority. If you’re in California or another US state with a privacy law: we don’t sell your personal information or share it for cross-context behavioral advertising, and we’ll never treat you differently for using your rights.
Write to [email protected] from the address in question. We answer within 14 days.
12Children
This site and the Playbook are for adults. We don’t knowingly collect data from anyone under 16; if you think a child has signed up, tell us and we’ll delete it.
13Security
Every connection is encrypted with TLS. Subscriber data and access tokens can’t be reached from the web, and only one administrator has access to them. No system is perfectly safe, but if something ever goes wrong we’ll tell affected people promptly.
14Changes
When the way we handle data changes, this page changes with it and the date at the top moves. If a change matters to you, subscribers get an email before it takes effect.
15Contact
Questions, requests or complaints: [email protected].