Last updated: 8 August 2026
This policy explains what personal data GlowSteal collects, why, on what legal basis, who else processes it, and what rights you have. We have tried to describe what actually happens rather than what sounds reassuring.
The data controller is GlowSteal. You can reach us about anything in this policy at [email protected].
Newsletter subscription. If you subscribe, we store your email address, optionally a first name if you give one, the page you subscribed from, the date and time, and a small set of interest tags describing the section you signed up from. We store this to send you the newsletter you asked for.
Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time by unsubscribing, which does not affect anything sent beforehand.
Server logs and abuse prevention. Our server and the newsletter form process your IP address. The IP is held briefly in memory to rate-limit submissions so bots can't flood our mailing list. Our hosting infrastructure also writes standard access logs containing IP address, timestamp, requested URL and browser user-agent.
Legal basis: our legitimate interest in keeping the site secure and available (GDPR Art. 6(1)(f)).
Analytics. We use Google Analytics 4 to see which articles get read. It only runs if you press Accept. Until you do, the Google Analytics script is not loaded at all: no request is made to Google, and no analytics cookie exists on your device. If you press Decline, nothing loads and the site behaves identically. You are not asked again.
If you accept, Google Analytics sets cookies and receives your IP address (truncated before storage), the pages you view, referring site, approximate location, and device and browser characteristics. Google acts as our processor for this, and also processes some of it for its own purposes. We instruct Google not to use it for advertising: ad storage, ad personalisation and advertising identifiers are all switched off, so this data is not used to build an advertising profile of you.
Legal basis: your consent (GDPR Art. 6(1)(a)), and consent for the storage itself under the ePrivacy Directive. You may withdraw it at any time by clearing this site's local storage in your browser, which makes the choice reappear.
Before you choose, GlowSteal sets no cookies. We run no advertising and no cross-site tracking scripts, and there is no cookie wall — declining costs you nothing.
Cookies are set only if you accept analytics. In that case Google Analytics writes its own cookies (typically _ga and _ga_<id>) to tell repeat visits apart. They expire after up to two years, or sooner if you clear them.
Separately, we use your browser's local storage for two things. Both stay on your device and are never transmitted to us:
theme — remembers whether you prefer light or dark mode.gs-analytics-consent-v2 — remembers whether you accepted or declined analytics, so we stop asking.You can clear both at any time through your browser settings without losing access to anything.
We do not sell your data, trade it, or share it for anyone else's marketing. We do rely on a small number of service providers to operate the site:
Each acts on our instructions only. We may also disclose data where the law requires it.
We operate from North Macedonia. If you are in the European Economic Area or the United Kingdom, your data is therefore processed outside your home jurisdiction. Where a transfer is not covered by an adequacy decision, we rely on Standard Contractual Clauses with the relevant provider. Full details are available on request at [email protected].
If the GDPR applies to you, you have the right to access your data, correct it, have it deleted, restrict or object to how we process it, receive a portable copy, and withdraw consent at any time. Equivalent rights apply under North Macedonia's Law on Personal Data Protection.
Email [email protected] and we will respond within one month. There is no charge, and you do not need to give a reason to unsubscribe or be deleted.
If you think we have handled your data badly, you can complain to a supervisory authority. In North Macedonia that is the Agency for Personal Data Protection. If you are in the EEA or UK, you may complain to the authority where you live, work, or where the problem occurred.
You are subscribed as soon as you submit the form — we do not send a confirmation link. That means we have not verified that the address belongs to you, so if someone has entered yours without your permission, use the unsubscribe link in any email we send and you will be removed. Every email carries a one-click unsubscribe link.
We send the newsletter you signed up for. We do not pass your address to brands or advertisers.
GlowSteal is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has subscribed, contact us and we will delete the record.
The site is served over HTTPS, and access to subscriber data is limited to the people who need it. No system is perfectly secure, but we will notify you and the relevant authority if a breach affects your rights, as the law requires.
If we change how we handle personal data we will update this page and its revision date. If a change materially affects you, we will say so in the newsletter rather than relying on you re-reading this page.