Privacy notice

The Protocol is an editorial site. We collect the minimum necessary to operate the publication, and we name what we collect plainly.

If you subscribe

To receive the newsletter you provide an email address (and optionally a name). Both are stored by our publishing platform, Ghost, and used to send you the newsletter and account-related messages. You can unsubscribe at any time via the link in any email or by deleting your account from the member-settings page.

What our server records

When you visit the site, our web server records standard access-log entries:

• your IP address;
• the date and time of the request;
• the URL you requested and the HTTP response status;
• your browser’s user-agent string;
• the referring URL, if your browser sends one.

This is the standard information any web server keeps. It is not linked to any identity and is not shared with third parties.

Why

Access logs are used only for site operation and security: diagnosing errors, mitigating abuse, and understanding traffic patterns. Email addresses are used only to deliver the newsletter and account messages.

Retention

Access logs are retained for up to 30 days and then rotated out. Member email addresses are retained for as long as you are subscribed; on unsubscribe/delete they are removed from active records within 30 days.

Hosting and sub-processors

The site runs on Amazon Web Services (AWS) in the European Union (Stockholm region, eu-north-1). AWS acts as a data processor for the limited purpose of operating the server. The Ghost publishing platform is self-hosted on the same server — no third party receives your data for that operation.

Your rights under the GDPR

Under Articles 15–22 of the EU General Data Protection Regulation, you have the right to request information about, rectification of, or erasure of personal data we hold about you; to restrict or object to processing; and to data portability. You also have the right to lodge a complaint with a supervisory authority.

Contact

To exercise any of these rights or to ask a question about how data is handled, see the contact email on the Impressum page.

Changes to this notice

If the site adds new analytics, payment processing, or other features that change what is collected, this notice will be updated to describe it.