Printed Spare Parts
No. 7 · October 2026 · Receive the Thursday letter

Privacy

2 November 2026. The controller is Georges Lieben, for Printed Spare Parts.

Write to hello@printedspareparts.com for anything in this note: a copy of what is held, a correction, or erasure.

Reading the journal

The journal is a static site. Opening a page does not create an account, and the journal itself sets no analytics cookie and runs no advertising. The host, Vercel, keeps ordinary connection logs, which can include an IP address, for security and the operation of the network. Those logs are not used here to identify a reader, and they are not joined to the letter.

The Thursday letter

If you ask for the letter, the journal processes your email address in order to send it. The legal basis is your consent (GDPR article 6(1)(a), where that law applies). Consent is the form, which says what the letter is, and a second message that you must open before anything else is sent. The letter is the week’s notes and one essay. It is not a list of other offers.

What is stored, once the letter is connected:

  • the email address
  • whether it is waiting, confirmed, or unsubscribed
  • the confirmation token, which expires after 48 hours, and a separate token for leaving
  • the time you asked, the time you confirmed, and the time you left
  • the wording you consented to, and the page you used

An IP address is not stored with the request. Until the services below are connected, the form stores nothing and sends nothing. It says so on the page.

Who else handles the address

Subscriber emails are stored with Supabase in the United States (us-east-1) and sent via Resend (EU). Resend is a processor. Before the letter is turned on, the controller should accept Resend’s data processing terms. Storing the address means it is processed in the United States. Neither firm is given the list for its own marketing.

Leaving, and how long it is kept

Every letter has an unsubscribe link. It does not ask you to sign in, and it takes effect when you use it. You can also write to the controller. Leaving is as easy as asking.

The address and the record of consent are kept while you receive the letter, and for a short time after you leave, so the journal can show that it stopped. You may ask for the address to be erased. A minimal record that a particular address must not be written to may be kept so that a later mistake does not start the letter again.

Your rights

Where the GDPR applies, you can ask for access, rectification, erasure, restriction, and a portable copy, and you can object. You can complain to a supervisory authority. That is usually the authority in the place where you live or work. The journal does not sell personal data, and it does not use the list to profile readers. The journal is not aimed at children.

This note will be dated again if it changes.