All legal documents
Data & privacyVersion 1.0.0Effective 20 September 2026Updated 20 September 2026

Privacy Policy

What we collect, why, how long we keep it, who we share it with, and how to exercise your rights under GDPR, UK GDPR and CCPA/CPRA.

In plain English

We collect the minimum data we need to publish, host analytics, and answer your messages. We do not sell personal data. We support GDPR, UK GDPR and CCPA/CPRA rights.

01

Scope and controller

This Privacy Policy applies to yottable.top and to any newsletter, form or calculator we operate. The data controller is the Yottatable editorial team, reachable at [email protected].

If you are located in the European Economic Area, the United Kingdom or Switzerland, the controller is established for the purposes of the General Data Protection Regulation. If you are located in California, this policy describes your rights under the California Consumer Privacy Act as amended by the CPRA.

02

Plain-English summary

We do not run advertising networks, we do not sell personal data, and we do not embed third-party trackers for the purpose of profiling you across other sites. Our analytics are aggregate counts of page views, not behavioural profiles.

When you send us an email, subscribe to a newsletter or submit a correction, we keep what you sent us. You can ask us to delete it at any time, and we will.

03

What we collect

  • Server logs: IP address, user-agent string, requested URL and response status. Used for security and aggregate traffic analysis. Retained for 30 days.
  • Analytics: aggregate page-view counts using self-hosted or first-party analytics. No cross-site profiling, no advertising identifiers.
  • Newsletter: email address and a confirmation token. Stored with the newsletter operator until you unsubscribe.
  • Correspondence: anything you send us by email or web form. Stored in our editorial mailbox and email client until deleted or no longer needed.
  • Cookies: as set out in the Cookie Policy. Strictly necessary cookies by default; analytics and preferences cookies only after consent where consent is required.
05

Cookies and similar technologies

Cookies and similar technologies are governed by our Cookie Policy, which forms part of this policy by reference.

06

Analytics

We use lightweight, privacy-respecting analytics that record only what page was requested and an aggregate, non-identifying count of the request. We do not use Google Analytics in its default configuration, we do not use Meta Pixel, and we do not embed third-party analytics that follow you across other sites.

If our analytics tooling changes in a way that collects more information, we will update this policy, refresh the cookie banner and obtain consent where required.

07

Emails and newsletters

If you subscribe to our newsletter, we keep your email address and a confirmation token until you unsubscribe. We use a confirmation flow to verify the address is yours before sending anything. Each email contains a one-click unsubscribe link; we honour unsubscribe requests immediately and within the timeframes required by applicable law.

If you email us with a question or correction, we keep the email in our mailbox for as long as we need to resolve the request and for a reasonable archive period thereafter. You can ask us to delete any specific email at any time.

08

How long we keep data

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Server logs are retained for 30 days, newsletter subscriptions until you unsubscribe, and correspondence for a reasonable archive period consistent with the original request. Aggregate, non-identifying analytics may be retained indefinitely.

09

Sharing and processors

We share personal data only with the processors we need to operate the site: hosting, analytics, newsletter delivery and (rarely) legal advisors. A current list of categories is available on request to [email protected].

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not allow third parties to combine our data with their own for profiling. If this ever changes, this policy will be updated and you will be given a meaningful chance to object before the change takes effect.

10

International transfers

Some of our processors may store or process personal data outside your country of residence. Where personal data is transferred internationally, we rely on the safeguards permitted under applicable law — adequacy decisions, standard contractual clauses, or other lawful mechanisms — and we make those safeguards available on request.

11

Your rights

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; restrict or object to processing; receive a portable copy of data you provided; and withdraw consent where consent is the legal basis. To exercise any of these rights, email [email protected].

  • EEA and UK residents: the rights under Articles 15 to 22 of the GDPR and the UK GDPR.
  • California residents: the rights under the CCPA and CPRA, including the right to know, delete, correct and limit the use of sensitive personal information.
  • Other jurisdictions: equivalent rights under any local data-protection law that applies to you.
12

Children

Yottatable is intended for a general audience and does not knowingly collect personal data from children under 16. If you believe we have collected personal data from a child below the relevant age threshold, contact [email protected] and we will delete the data.

13

Security

We use technical and organisational measures appropriate to the sensitivity of the data, including encrypted transport (HTTPS), access controls on administrative accounts, and least-privilege principles for our processors. No security measure is perfect; if a breach affecting your data occurs, we will notify you where required by applicable law.

14

Changes and complaints

We will update this policy if our practices change. Material changes will be highlighted on the homepage for at least 30 days. If you have a complaint about our handling of your data, email [email protected] and we will respond within five working days. If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

Questions about this document?

We acknowledge most messages within five working days.