Legal

Mentions légales, privacy policy, cookie policy and terms of use.

Mentions légales

Publication operator details, hosting provider and contact information are being finalized with legal counsel.

Privacy policy (RGPD/EU)

Draft v0.2, effective 2026-05-15. The newsletter signup is operational, so its specifics are stated here. The full, counsel-reviewed policy supersedes this stub before public launch; material changes will be announced on this page.

Controller

The data controller is THIS CHARMING BRAND LLC (2104 House Ave, Suite 284, Cheyenne, WY 82001, USA), publisher of Nightlydata, contactable at [email protected]. Nightlydata publishes editorial content under a disclosed pen name (see transparency); this does not affect the controller's legal identity stated here. A dedicated data-protection contact is finalized with counsel before public launch.

Newsletter: data we collect

When you subscribe: your email address, the date and time of the request, a truncated IP address (network prefix only, kept for accountability of the consent action under RGPD art. 7(1)), and your confirmation status. We use double opt-in: the address becomes a confirmed subscriber only after you click the confirmation link we email. Legal basis: your consent (RGPD art. 6(1)(a)), evidenced by the double opt-in. Consent is informed and as easy to withdraw as to give.

Newsletter: processors and data location

Email delivery and the subscriber list run on Resend, operated by Plus Five Five, Inc. (United States), which stores and processes data in the United States. The transfer relies on the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework; both Plus Five Five, Inc. and Cloudflare, Inc. are certified under the EU-U.S. DPF. A copy of the Standard Contractual Clauses can be requested via the contact channel below. Sending for nightlydata.com is configured in Resend's EU region (eu-west-1). The signup endpoint and the pending state run on Cloudflare Workers and a Cloudflare D1 database (Cloudflare, Inc., United States); the database is created with an EU location hint and Workers execute on Cloudflare's global edge network. Resend's sub-processor list: resend.com/legal/subprocessors. Site analytics (separate from the newsletter) use PostHog (EU instance, IP anonymized); see the cookie policy below.

Newsletter: security, retention and your rights

Data is transmitted over TLS. Confirmation tokens are single-use, high-entropy, and expire after 24 hours. Unconfirmed signups are deleted automatically once the 24-hour confirmation window closes. Confirmed subscribers are kept until they unsubscribe, which is available from any newsletter email. You may exercise access, rectification, erasure, portability, objection, and withdrawal of consent via contact, and you have the right to lodge a complaint with the French supervisory authority, the CNIL (cnil.fr). This stub is noindexed.

Cookie policy

Strictly necessary cookies for site function. Anonymous analytics via PostHog (EU instance, IP anonymization). No marketing cookies. No cross-site tracking.

Terms of use

Standard terms covering content reuse, citation rules and limitation of liability for editorial content.

Affiliate disclosure

Some links on this site are affiliate links. If you subscribe to a service via these links, we may receive a commission at no additional cost to you. Our analysis remains independent (see transparency).

These legal documents are being finalized with counsel. This page is not yet indexed while that review is in progress.