What we collect, in plain words.
This page is our privacy notice: what the site holds about you, why, where, and who else touches it. Both products are still in development; each will have its own notice before it asks anyone for data.
The waitlist
Nothing. The sign-up form was removed because it asked for an address and then discarded it. When sign-up opens, this section will say exactly what is stored and for how long.
Readinity data
There is no Readinity app yet. What it will store, where, and for how long will be on this page before anyone can use it. Your household details will not be a dataset we mine.
Cyberinity data
There is no Cyberinity app yet. When there is, the identifiers you ask it to look for will be stored in your account, in the EU, and this page will describe how they are used before anyone can sign up.
What your browser stores
Four small entries, all of them yours: the language you picked, the country or region you picked it for in the language menu, your answer about analytics, and whether you waved away the offer to read this site in another language. They stay in your browser, they are not sent anywhere, and clearing your site data removes them. One more lasts only for your visit: if a page fails to load after we update the site, its address is noted so that it is loaded once more rather than again and again. Each of them does only what you asked the site to do, so none needs your consent.
Analytics on this site, only if you accept
This site asks before using Google Analytics. If you accept, Google sets cookies and receives the pages you view, the site you came from, your approximate location and your device type. Advertising features and Google signals are off, and the data is kept for two months. If you decline, nothing from Google loads; Cookie settings in the footer changes your choice. The legal ground is your consent, and you can withdraw it at any time in Cookie settings. The apps are not built yet; we do not plan analytics or advertising SDKs in either, and each app’s own privacy policy will say what it contains before it ships.
The contact form
What you type goes to a mailbox we read, and this site keeps no copy of it: there is no database behind the form. The handover is done by SendGrid (Twilio) in the United States, from our server rather than from your browser, so nothing is sent anywhere until you press the button. The address you give is used to answer you, and to send you one short confirmation that a person has your message — normally no more than one a day, repeating nothing you wrote, and never anything else. The message is deleted once the exchange is closed. The legal ground is our legitimate interest in answering people who write to us.
Reporting an error in an article
When you tell us about an error in an article, we record what you reported and what came of it — never who you are. Any reply goes from our mailbox, so your address stays there and not with the report.
Logs
When you send the contact form, Google Cloud records the request — your IP address, the time and whether it succeeded, never what you wrote — in our project's logs, which are kept in the EU for 30 days. To stop floods of messages, the server also keeps a key derived from your IP address (not the address itself) in its memory, counting only your last hour of messages, and a key derived from your email address for a day, so a confirmation is not sent to the same address twice; neither is ever written down. The legal ground for these is our legitimate interest in keeping the service safe. Visits to pages are not logged.
Your rights
You have the right of access to the personal data we hold about you, the right to rectification, the right to erasure ('right to be forgotten'), the right to restriction of processing, the right to data portability and the right to object (GDPR Articles 15 to 18, 20 and 21). When we rectify or erase data, or restrict its processing, we tell anyone we passed it to (Article 19). Write to us through the contact form or at admin@novelapproaches.nl. You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work — or with ours, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Our texts, images and AI training
The articles on this site may be used for text and data mining, AI training included, under the terms on the Rights page in the footer. We claim no copyright in images made with AI.
Articles and the people in them
Articles on this site stay published: we do not delete them after a period, because others link to and cite them. When we correct one, the page says so; when we withdraw one, its address says so. If an article names you, you can ask us to correct it, remove your name or take it down; we weigh your request against the interest in a complete record (GDPR Article 17(3)) and reply within a month. Behind each article we keep a record of who reviewed it, under an internal reference that never appears on the page. Planned before the public launch: that record kept while the article is published and for five years after, and drafts we never publish deleted after a year.
The whole data dictionary.
The privacy policy names every entry. No advertising identifiers, no device fingerprint and no mailing list. The one email we send — the confirmation after you write to us — is plain text, so there is nothing to put a tracking pixel in.
Every processor, named.
No advertising network. Google Cloud runs the site: its load balancer ends the secure connection, so it sees your IP address and the pages you ask for. Google Analytics sees only visitors who accept analytics.
Before launch this notice changes often; its history is kept from launch day.