Privacy policy
LAST UPDATED · 28 OCTOBER 2026
This site is small on purpose: no accounts, no ads, no tracking cookies. The only personal data I collect is the email address you give me for Lithan Letters. This page says what happens to it.
Who is responsible
- Controller
- [Full legal name], publishing as Rick Lithan
- Address
- [Postal address]
- Contact
- [email protected]
The newsletter
When you join Lithan Letters I store your email address, the date and time you signed up, and the wording you agreed to. I use it only to send you the newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link in every letter or by writing to me. I keep your address until you unsubscribe, then delete it.
Sign-ups are stored in a database hosted by Railway (Railway Corp.) in the EU (Netherlands). Before the first letter goes out, I will name the email delivery provider here.
Spam protection
When you submit the form, Cloudflare Turnstile checks that the request comes from a person and not a bot. To do this Cloudflare processes technical data such as your IP address and browser characteristics. It sets no advertising cookies. The legal basis is my legitimate interest in keeping the list free of spam (Art. 6(1)(f) GDPR).
Visitor statistics
I use Cloudflare Web Analytics to see how many people visit and which pages they read. It sets no cookies, does not fingerprint you and does not build profiles. Results are only ever aggregated.
Hosting and delivery
The site runs on Railway and is delivered through Cloudflare (Cloudflare, Inc.), which processes your IP address and request data to deliver pages and protect the site from attacks. Fonts are served from this site itself, so no request goes to Google.
Your rights
- See the data I hold about you, and get a copy
- Have it corrected or deleted
- Restrict or object to its use
- Withdraw consent at any time, without affecting what happened before
Write to [email protected] and I'll answer within a month. You can also complain to a data protection authority; in Spain that is the Agencia Española de Protección de Datos (aepd.es).