Last updated: 28 July 2026
This page explains what personal data notes in progress collects, why it collects it, how long it is kept, and what you can do about it. I have tried to write it in plain language rather than legalese.
Who is responsible
notes in progress is a personal blog written and run by one person, L. I am the data controller for anything collected through this site. If you have a question about your data, or you want to make a request under data protection law, email luka.kosovel12@gmail.com and I will deal with it myself. If you need my full legal name and postal address for a formal request, ask and I will provide them.
What I collect, and why
When you send me a message. The contact form asks for your name, your email address and your message. I use them for one thing only: to read your message and reply to it. The legal basis is your consent, which you give by ticking the box on the form. You can withdraw it at any time by emailing me.
When you subscribe to the newsletter. I collect your email address so I can send you new essays. The legal basis is your consent. Every email includes an unsubscribe link, and unsubscribing removes your address from the list. Newsletter delivery is handled through Hostinger Reach, which processes the address on my behalf.
If you leave a comment. WordPress stores the name and email address you enter, the comment itself, your IP address and your browser user-agent string. The IP and user-agent are stored to help identify spam. If avatars are shown, a hashed version of your email address may be sent to the Gravatar service so it can return an image.
Automatically, in the background. Like every website, this one runs on a server that keeps access logs. Those logs typically contain your IP address, the pages you requested, the time of the request and your browser type. They exist for security and troubleshooting, they are kept by my hosting provider, and I do not use them to build any profile of you.
What I do not do
- I do not run advertising, ad networks or retargeting.
- I do not use Google Analytics, Facebook Pixel or any similar tracking script.
- I do not build profiles of readers or make automated decisions about anyone.
- I do not sell, rent or trade your data. Not now, not later.
Who else can see your data
- Hostinger hosts the site and stores its database and server logs on my behalf.
- Hostinger Reach stores newsletter subscriber addresses and sends the emails.
- Gravatar (Automattic) may receive a hashed email address in order to display a commenter’s avatar.
- Unsplash serves some of the photographs on this site directly, which means your browser makes a request to images.unsplash.com and that service can see your IP address.
- Nobody else, unless I am legally required to disclose something.
How long things are kept
- Contact form messages: up to 24 months, or until you ask me to delete them, whichever comes first.
- Newsletter address: until you unsubscribe or ask to be removed.
- Comments and their metadata: for as long as the post is online, or until you ask for removal.
- Server logs: according to my hosting provider’s standard retention period.
Your rights
If you are in the UK, the EU or anywhere with similar law, you have the right to ask me for a copy of the data I hold about you, to have it corrected, to have it deleted, to restrict or object to how I use it, and to receive it in a portable format. Where I rely on your consent, you can withdraw it at any time. Email me and I will act on it; there is no form to fill in and no fee.
If you are not happy with how I have handled a request, you have the right to complain to the data protection authority in your country.
Children
This site is not aimed at children and I do not knowingly collect data from anyone under 16. If you believe a child has sent me their details, email me and I will delete them.
Security
The site is served over HTTPS and access to the WordPress dashboard is restricted to me. No website can promise perfect security, but I keep the software updated and I collect as little as possible in the first place, which is the best protection there is.
Cookies
Cookies are covered separately on the cookie policy page. The short version is that this site sets almost none.
Changes to this policy
If I change how any of this works, I will update this page and change the date at the top. If the change is significant and I have your email address, I will tell you directly.
Contact
Questions, requests or corrections: luka.kosovel12@gmail.com.