1. Data controller

Last updated: August 2026

This Policy describes how strofia.com (the "Site") processes the personal data of the people who visit it.

Data controller: Strofia, identified in the legal notice Contact: [email protected]

It is worth starting with what this Site does not do: no advertising cookies, no analytics tools that identify visitors, no profiling, no selling of data, and no account and no personal data of any kind are needed to read the poems.

2. Data processed

When What Where it stays
Visiting any page IP address, browser type and requested page, in the hosting provider's technical logs CDN logs, deleted automatically after a short period
Accepting or refusing the cookie notice Your choice A cookie in your browser
Changing theme, text size or page width Your preference Your browser's local storage; it never leaves your device
Sending the contact form Name, email address, subject and message The mailbox of the party responsible for the Site
Only if you create an account Email address and whichever profile fields you choose to fill in Elier Tech identity provider

No other personal data is collected. Reading the Site end to end without accepting anything and without sending anything is entirely possible, and is the intended use.

4. Retention

  • Contact-form messages: up to 12 months from the last exchange, and less if the matter closes sooner.
  • Text submissions: for as long as the work stays published. If declined, the submission is deleted within 6 months.
  • Consent cookie and preferences: until you clear them in your browser.
  • Hosting's technical logs: the short period the provider applies; they are not copied or kept separately.
  • Account data: for as long as the account exists. Deleting the account deletes them.

5. Data sharing

Strofia does not sell, rent or share personal data for commercial or advertising purposes. The only third parties involved are the ones the Site needs in order to work, and they act as processors:

  • Cloudflare, Inc. — hosting and content delivery for the Site. Processes requests and technical logs.
  • The controller's email provider — receives the contact-form messages.
  • Elier Tech identity provider — only if you create an account.

Data may also be disclosed where the law or a competent authority requires it.

These providers may process data outside the European Economic Area. Where that happens, it relies on the European Commission's standard contractual clauses or on an adequacy decision.

6. Your rights

Under the GDPR and other applicable law, you may exercise the following rights over your personal data:

  • Access — get a copy of what is held about you.
  • Rectification — correct anything inaccurate or incomplete.
  • Erasure — ask for it to be deleted.
  • Restriction — limit the processing in certain cases.
  • Objection — object to processing based on legitimate interest.
  • Portability — receive your data in a structured, commonly used format.
  • Withdrawing consent — at any time, without affecting what was processed before.

To exercise them, write to [email protected]. You will get an answer within 30 days at most.

If you believe your data has been handled unlawfully, you may lodge a complaint with the supervisory authority in your country of residence.

7. Changes to this policy

This Policy may be updated. Changes take effect when published on this page, and the date of the last update appears at the top.

For any question about this Policy, write to [email protected] or use the contact form.