LEO Insider is a publication, not a platform. We do not sell your data, we do not run advertising networks, we have no user accounts, and we ask for exactly one thing: an email address, and only if you want the newsletter.
This page sets out precisely what is collected, why, how long it is kept, and how to make us delete it. Questions or requests: [email protected].
What We Collect
1. Analytics — only if you agree
We use Google Analytics 4 to understand which analysis people actually read. It tells us page views, rough geographic region, device type and how visitors arrived. We use it to decide what to write next.
It does not run until you accept it. Analytics storage is set to “denied” by default, so no analytics cookie is written unless you press Accept on the consent banner. If you decline, no analytics cookie is set. You can change your mind at any time using the Cookie preferences link in the footer of every page.
We do not use Google Analytics for advertising. Ad personalisation, ad storage and ad-user-data signals are permanently disabled — not merely unrequested, but switched off in the configuration. Google acts as our data processor, and data may be processed in the United States under Google’s standard contractual clauses.
2. Newsletter — only if you subscribe
If you subscribe to LEO Insider Weekly we store:
- Your email address — so we can send you the newsletter.
- The date and time you subscribed, the page you subscribed from, and your IP address — together these form a record that you consented, which we are obliged to be able to demonstrate.
That is all. We do not ask for your name, employer or job title. Every newsletter carries a one-click unsubscribe link; using it marks you unsubscribed immediately and we stop mailing you. To be deleted entirely rather than merely unsubscribed, email [email protected] and we will erase the record.
3. Server and security logs
Like every website, our hosting and our CDN (Cloudflare) record standard request logs — IP address, timestamp, page requested, browser user-agent. These exist to keep the site online and to block attacks and bots. Cloudflare sets a strictly-necessary cookie (__cf_bm) for bot management. This processing is necessary for the security of the service and does not require consent, but it is also not used to profile you, and we do not use it for analytics.
What We Do Not Do
- No comments. Comments are disabled site-wide. We collect nothing through them because they do not exist.
- No accounts. Public registration is closed. You cannot create a profile here, so there is no profile to leak.
- No advertising or tracking networks. No ad pixels, no retargeting, no data brokers, no social tracking scripts.
- No selling or sharing. We do not sell, rent or trade your email address or any other personal data. Ever.
Cookies
| Cookie | Purpose | Set when | Expires |
|---|---|---|---|
leo_consent | Remembers your analytics choice, so we stop asking | You answer the banner | 6 months |
_ga, _ga_* | Google Analytics — distinguishes visitors | Only if you accept | Up to 2 years |
__cf_bm | Cloudflare bot management (strictly necessary) | Every visit | 30 minutes |
Declining analytics means only leo_consent and the Cloudflare security cookie are used. Nothing is stored that identifies you.
Legal Basis
- Consent — analytics cookies, and the newsletter. You gave it freely, and you can withdraw it at any time without giving a reason.
- Legitimate interest — server and security logs, for keeping the site available and defending it against attack.
How Long We Keep It
- Newsletter subscribers — until you unsubscribe or ask to be deleted.
- Analytics — retained by Google according to our configured retention period, currently the shortest Google offers for GA4.
- Server logs — a short rolling window, then overwritten. We do not archive them.
Your Rights
If you are in the UK, EU or another jurisdiction with equivalent law, you have the right to access the data we hold on you, to have it corrected, to have it erased, to object to processing, to restrict it, to receive it in a portable format, and to withdraw consent at any time.
In practice, for almost everyone reading this, the only personal data we hold is a single email address. Write to [email protected] and we will confirm what we have and delete it on request. We do not require you to prove a legal basis for asking, and we will not try to talk you out of it.
If you believe we have handled your data improperly, you are entitled to complain to your national data protection authority. We would rather you told us first, so we can fix it.
Third Parties
- Google (Google Analytics 4) — analytics processor, only with your consent.
- Cloudflare — CDN, DNS and security. Handles traffic in transit.
- Our web host — stores the site and its database, including the newsletter list.
Each of these acts as a processor on our instructions. None of them is permitted to use your data for their own purposes.
Changes
If we change what we collect, we will change this page and update the date below. We will not quietly start collecting something new and leave the old text in place.
Last updated: July 2026. Contact for any privacy matter: [email protected].