Your Privacy, Plainly Explained
This Privacy Policy explains what data FragBytes collects, why we collect it, how we use it, and the rights you have over it under EU/UK and US privacy law.
Contents
1. Who we are
FragBytes (“we“, “us“, “our“) is the publisher of fragbytes.com. For the purposes of EU/UK GDPR, we are the data controller. Contact our privacy team at privacy@fragbytes.com.
2. Information we collect
2.1 Information you provide directly
- Newsletter signups. Email address, optional name.
- Contact and tip submissions. Email address, message content, attachments.
- Comments (if enabled). Display name, email, comment content, IP.
2.2 Information collected automatically
- Log data. IP, approximate location, browser, OS, referring URL, pages viewed, timestamps.
- Device data. Screen size, language preference.
- Cookies. See Section 5.
3. How we use your information
- To operate, maintain, and improve fragbytes.com.
- To send the newsletter you have subscribed to.
- To measure aggregate site usage.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
We do not sell your personal information. We do not share it with third parties for marketing. We do not profile readers for automated decisions.
4. Legal basis for processing (GDPR / UK GDPR)
- Consent (Art. 6(1)(a)). Non-essential cookies, analytics, newsletter signups.
- Contract (Art. 6(1)(b)). Where processing is necessary to deliver a service you requested.
- Legitimate interests (Art. 6(1)(f)). Aggregate analytics, security, basic site operations.
- Legal obligation (Art. 6(1)(c)). To comply with applicable law.
5. Cookies and similar technologies
Strictly necessary
Required for the site to function. No consent needed.
Analytics
Privacy-respecting analytics. Helps us understand which articles are useful.
Functionality
Stores your preferences. Set only after you accept cookies.
Advertising (if used)
If we run any advertising, we will list each ad partner here, and only set the relevant cookies after you opt in.
6. When we share information
- Service providers. Web hosting, email delivery, aggregate analytics. Each bound by a DPA.
- Legal requirements. When required to comply with valid legal process.
- Business transfers. In a merger, acquisition, or sale, with notice and choice.
7. International data transfers
Where personal data of EU/UK/EEA residents is transferred to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum, plus encryption in transit and at rest.
8. Data retention
- Newsletter: until you unsubscribe, then deleted within 30 days.
- Contact / tips: up to 24 months after last interaction.
- Server logs: 30 days, then deleted or anonymized.
- Analytics: aggregated and anonymized within 14 months.
9. Your rights — EU / UK / EEA / Switzerland
- Access — request a copy of personal data we hold.
- Rectification — correct inaccurate data.
- Erasure — ask us to delete your data.
- Restriction — limit processing.
- Portability — receive data in machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time.
- Lodge a complaint — with your local supervisory authority.
We respond to verifiable rights requests within 30 days (extendable to 60 for complex requests with notice).
10. Your rights — United States
- Right to know what personal information we collect.
- Right to delete personal information.
- Right to correct inaccurate personal information.
- Right to opt out of “sale” or “sharing”. We do not sell or share for cross-context behavioral advertising.
- Right to limit use of sensitive personal information.
- Right to non-discrimination.
11. Children’s privacy
This site is not directed at children. We do not knowingly collect personal information from children under 13 in the US (COPPA) or under 16 in the EU/UK/EEA.
12. Security
TLS 1.3 in transit, encryption at rest where supported, principle-of-least-privilege access controls, routine security review.
13. Third-party links
Our site links to third-party sites we do not control. This Privacy Policy applies only to fragbytes.com.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date and, for material changes, notify you via prominent notice on the site or by email.
15. How to contact us
Privacy team
privacy@fragbytes.com
EU representative
Where required, we will appoint and publish an EU representative under Art. 27 GDPR. Contact privacy@fragbytes.com for current details.