Privacy
This site sets no tracking cookies, builds no profile of you, and sells nothing to anyone. That is why you are not being asked to dismiss a consent banner.
Reading the site
Visits are counted with Umami, which is cookieless. It records the page, the referring site, rough country, and browser type — as aggregate counts, not as a record attached to you. There is no identifier that would let anyone follow you between pages, between visits, or to another site.
The legal basis is legitimate interest (GDPR Article 6(1)(f)): knowing which posts are read, with the minimum data that answers the question.
The newsletter
If you subscribe, your email address is stored by the newsletter provider for one purpose: sending the newsletter. Consent is the legal basis, given by confirming the subscription — a double opt-in, so an address cannot be added by someone else.
Every email carries a one-click unsubscribe. Unsubscribing deletes the record; it is not kept on a suppression list.
Writing to me
Mail sent to the addresses on this site is forwarded to a personal inbox and kept only as long as the conversation is useful.
Things this site does not do
- No advertising, and no advertising networks
- No tracking cookies, pixels, or fingerprinting
- No social media embeds — the share buttons are ordinary links, which report nothing until you click one
- No selling or sharing of data with third parties
- No account, so no password to lose
Where data goes
The site is served from a content delivery network, which necessarily sees the IP address of every request in order to answer it. Those logs are the host's, are kept briefly, and are not accessible to me as identifiable records.
Affiliate links are the one exception worth knowing about: following one takes you to that company's site, where their privacy policy applies and they will set their own cookie to attribute the sale. Not following the link means none of that happens. See the affiliate disclosure.
Your rights
Under GDPR you can ask what is held about you, have it corrected, have it deleted, or object to it being processed at all. In practice there is very little to ask about — but ask, and you will get a straight answer within 30 days.
You also have the right to complain to your national data protection authority.
Contact
hello@tomeandtrail.com
Changes
If this policy changes, the date at the top changes with it. Anything that materially affects what is collected will be said in the newsletter rather than quietly edited in.