Privacy policy

Last updated: 28 September 2026

This policy explains what personal data ampear processes, why, and what your rights are under the General Data Protection Regulation (GDPR).

1. Controller

træct.dev, Moritz Schlichting, Radarweg 293G, 1043 NZ Amsterdam, The Netherlands, KVK 98165925. Contact: mo@traect.dev. See the legal notice.

2. What we process

• Newsletter signup: your email address, the language and address of the page you signed up on, the date and time of signup and of your confirmation, and two random codes for the links in our emails: one to confirm (stored only as a one-way hash) and one to unsubscribe.
• Notifications to us: when you sign up, we receive an email with your email address, language, the time, the page you signed up on and your confirmation email with its two links, which we then send you personally from our own mailbox. When you confirm, we receive a short note with the same details.
• Technical data: when you visit the site, our hosting provider processes your IP address, browser type and the requested page to deliver the site and protect it against abuse. We do not store this data ourselves and do not use it to identify you. To stop abuse of the signup form, Cloudflare also counts signups per IP address over one minute.
• Emails you send us: the content of your message and your contact details, to answer you.

3. Purposes and legal bases

• Sending the Friday briefing (the weekly newsletter) and, once they are published, the two sample reports: your consent, given by submitting the signup form and confirmed through the link in our confirmation email (Art. 6(1)(a) GDPR). We send the newsletter only after you confirm. Until then, the confirmation email is the only email we send you; if you sign up again before confirming, we send a new link, at most one every 10 minutes. You can withdraw consent at any time with the unsubscribe link in every email or by replying; this does not affect processing before withdrawal.
• Notifying us of signups: our legitimate interest in knowing who signed up, so we can send you the confirmation email you asked for, answer requests such as the one for the sample reports and notice abuse of the form (Art. 6(1)(f) GDPR).
• Delivering and securing the website: our legitimate interest in a working, secure site (Art. 6(1)(f) GDPR).
• Answering your emails: our legitimate interest in responding to you, or steps prior to a contract at your request (Art. 6(1)(f) and (b) GDPR).

We only email people who signed up. We do not buy lists or send unsolicited email.

4. Recipients and processors

• Cloudflare, Inc. hosts the website and the signup database and delivers the notification emails to our own mailbox. The database is restricted to the EU jurisdiction. Website traffic and email delivery may be processed on Cloudflare's global network, including in the United States. Cloudflare is certified under the EU-US Data Privacy Framework and bound by a data processing agreement with Standard Contractual Clauses.
• Our email provider hosts the mailbox mo@traect.dev: the notifications arrive there, and we send you the confirmation email and our replies from it. It is bound by a data processing agreement.

We never sell your data or share it for advertising. Our emails contain no tracking pixels and we do not record whether you open them.

5. Retention

• Newsletter data: until you unsubscribe. Unsubscribing deletes it immediately, either with the button on the page the unsubscribe link opens or with your email program's unsubscribe function; if you unsubscribe by replying, we delete it within 30 days. Unconfirmed signups are deleted automatically 30 days after signup.
• Notification emails about you and the confirmation email we sent you: deleted from our mailbox when you unsubscribe, and within 30 days for signups that were never confirmed.
• Emails you send us: as long as needed to handle your request, and no longer than two years unless a legal obligation requires otherwise.

6. Cookies and local storage

ampear sets no cookies and uses no analytics or tracking. If you use the light/dark switch, your choice is saved in your browser's local storage so the site remembers it. This is strictly necessary to provide the function you asked for and never leaves your device.

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Write to mo@traect.dev; we answer within one month.

You also have the right to complain to a supervisory authority, in particular the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or the authority in your EU country of residence, such as the Garante per la protezione dei dati personali in Italy or the Hellenic Data Protection Authority in Greece.

8. No automated decisions

We do not use your data for profiling or automated decision-making.

9. Changes

We will update this policy when what we do changes, and tell subscribers about material changes by email.