Legal

Privacy Policy

What we collect, why we collect it, and what you can ask us to do about it.

Last updated

Draft — not yet legally reviewed. This page is a working template. Before you rely on it, set LEGAL_ENTITY, LEGAL_JURISDICTION and LEGAL_ADDRESS in inc/config.php, and have the wording checked by a lawyer in your jurisdiction. This notice disappears automatically once those values are filled in.

Who we are

This site is https://togopaws.com, operated by Togo Paws. For any privacy question, contact [email protected].

We are the data controller for the personal data described below.

What we collect

We collect as little as we can get away with. Specifically:

Newsletter subscriptions
Your email address, the IP address the request came from, and the date you subscribed.
Contact messages
Your name, email address, the subject you chose, your message, and your IP address.
Issue reports
Whatever you choose to give us — name and email are optional — plus the article URL, your description, any screenshot you attach, and your IP address.
Server logs
Our hosting provider records standard web server logs: IP address, timestamp, requested URL, referrer and user agent.
Article view counts
We count how many times an article is read. This is an aggregate number attached to the article, not to you.

We do not run advertising networks, behavioural profiling, or cross-site tracking on this site.

Why we collect it, and our lawful basis

  • Newsletter — to send you the emails you asked for. Lawful basis: your consent, which you can withdraw at any time.
  • Contact messages and issue reports — to read and reply to you, and to correct our content. Lawful basis: legitimate interests in running an accurate publication, and your consent where you volunteered the details.
  • IP addresses on forms — to rate-limit submissions and block abuse. Lawful basis: legitimate interests in keeping the site usable.
  • Server logs — security, diagnostics and abuse prevention. Lawful basis: legitimate interests.

Cookies

We set only the cookies the site needs to function — no analytics or advertising cookies. The detail, including what happens when you click an affiliate link, is in our cookie policy.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's marketing. It is handled by:

  • Our hosting provider, which stores the site and its database and generates server logs.
  • Our email provider, which delivers messages sent from the site.
  • Law enforcement or regulators, where we are legally required to disclose.

Clicking an affiliate link takes you to a third party — a retailer or affiliate network — which will apply its own privacy policy and cookies. We have no control over what they collect. See the affiliate disclosure.

How long we keep it

  • Newsletter addresses — until you unsubscribe or ask us to delete them.
  • Contact messages — kept while the matter is open and for a reasonable period afterwards, then deleted.
  • Issue reports — retained as part of our corrections record, since they document why an article changed. Personal details within them are removed on request.
  • Rate-limiting records — automatically discarded after one hour.
  • Server logs — retained per our hosting provider's standard period.

Your rights

Depending on where you live, you may have the right to:

  • Ask what personal data we hold about you, and get a copy.
  • Have inaccurate data corrected.
  • Have your data deleted.
  • Object to or restrict how we process it.
  • Withdraw consent at any time, including by unsubscribing.
  • Complain to your data protection authority.

To exercise any of these, email [email protected]. We will respond within the period required by applicable law, and we will not charge you for it.

Security

The site is served over HTTPS. Administrative access is password-protected with hashed credentials and rate-limited sign-in. Uploaded files are validated by content type and cannot be executed. Reader-submitted screenshots are stored outside the public web root and are not served publicly.

No system is perfectly secure. If you believe you have found a vulnerability, please tell us at [email protected] before disclosing it publicly.

Children

This site is intended for adults. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If this policy changes materially we will update the date at the top of this page. Continuing to use the site after a change means you accept the revised policy.

Contact

Privacy questions and requests: [email protected].