Box & Slate privacy policy

Box & Slate ("we," "us," or "our") operates the website boxandslate.com and the Box & Slate weekly email newsletter (sent on Sundays). This Privacy Policy explains how we collect, use, and protect your personal information.

What we store

We store your email address and when you signed up, so we can send the weekly digest.

Who handles it

Emails are sent by Resend; data is stored with Supabase; the site runs on Cloudflare. Our site analytics (Cloudflare Web Analytics) uses no cookies and doesn't identify you.

Your choices

Every email has an unsubscribe link. We never sell your data. Questions: hello@boxandslate.com.

How we use your information

Your email address is used solely to:

• Send you the weekly Box & Slate email (sent on Sundays)
• Send occasional service-related communications (e.g., changes to our service or this policy)

We do not sell, rent, or share your email address with third parties for marketing purposes.

Legal basis for processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your personal data is your explicit consent. By entering your email and signing up, you agree to receive the weekly email. Every email has an unsubscribe link.

Cookies and tracking

Box & Slate does not use cookies. The site saves a few display choices (such as List or Guide view) in your browser's local storage; they stay on your device. We use Cloudflare Web Analytics, which uses no cookies and doesn't identify you. We do not embed third-party tracking pixels or social media widgets.

Fonts are self-hosted — no requests are made to external font services.

International data transfers

Our service providers (Resend, Cloudflare, Supabase) are based in the United States. If you are located outside the United States, your email address may be processed in the United States. By subscribing, you consent to this transfer.

Data retention

We retain your email address for as long as you remain subscribed to our newsletter. When you unsubscribe, your email address is removed from our active mailing list. You may also request complete deletion of your data at any time.

Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — request your data in a portable format
• Withdraw consent — unsubscribe at any time via the link in any email
• Lodge a complaint — with your local data protection authority if you believe your rights have been violated

To exercise any of these rights, contact us at the email below.

Children's privacy

Box & Slate is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or to exercise your data rights, contact us at:

hello@boxandslate.com