This policy explains what personal data popolipopo handles when you visit the site, why, and the choices you have. It describes the practices in place on popolipopo.com and the articles section at popolipopo.com/articles. Web experiments published on their own subdomains may have their own notices.
popolipopo is an independent publication operated by House of Agile. House of Agile is responsible for deciding how and why personal data is processed on this site. You can reach us through our contact page for any question about this policy or about your personal data.
Like almost every website, our web server and the reverse proxy in front of it record technical information when a page is requested. This typically includes your IP address, the date and time, the page or file requested, the response status, the referring page, and your browser's user-agent string. We use this to keep the site running, diagnose errors, and protect against abuse and attacks. The legal basis is our legitimate interest in operating a secure and reliable website.
Cookies and similar storage are small pieces of data kept by your browser. We group them as:
A consent banner lets you accept or reject analytics cookies, and you can reopen it at any time through the "Cookie preferences" link in the footer. You can also refuse or remove cookies through your browser settings. Blocking strictly necessary cookies may break parts of the site.
We use Google Tag Manager to load Google Analytics 4 (GA4), provided by Google. GA4 helps us understand aggregate usage, such as which articles are read and how visitors reach the site. For this, Google may set cookies and process data such as your IP address, device and browser information, and the pages you view.
Analytics is not strictly necessary and is off by default. When you first visit, a cookie banner asks whether to enable it. Google Tag Manager runs in a consent-denied state until you accept (using Google Consent Mode), so no analytics cookies are set beforehand. You can change or withdraw your choice at any time through the "Cookie preferences" link in the footer, without losing access to the site. We do not use analytics data to identify you personally or to build advertising profiles.
Typefaces are served directly from our own servers (self-hosted). Displaying the site does not send your data to an outside font provider.
If you contact us, for example to report a correction, ask about an article, or discuss work, we process the information you choose to send so we can read and respond to your message. The legal basis is our legitimate interest in answering enquiries. Please send only what is necessary for your request.
Our articles run on Ghost, a publishing platform that can offer email subscriptions and member accounts. If a subscription or sign-up form is available to you and you choose to use it, your email address is processed to deliver what you signed up for, on the basis of your consent, and you can unsubscribe at any time. If no such form is shown, this section does not apply to your visit.
Some articles include affiliate links and product comparison cards. When you click one, you are sent to an online retailer, and that retailer or its affiliate network may set cookies or use other tracking so any resulting purchase can be attributed to popolipopo. We currently take part in the Amazon Associates Programme, and we may add other merchants such as AliExpress through the Awin network as our buying guides expand. The tracking on these clicks is operated by those retailers and networks under their own privacy policies, not by us. See our affiliate disclosure for how recommendations are chosen.
We use a small number of service providers to run the site and these may process limited personal data on our behalf or as independent controllers:
Where the GDPR applies, we rely on these legal bases: our legitimate interest for server logs, security, and answering enquiries; and your consent for analytics, non-essential cookies, and any email subscription. You can withdraw consent at any time, which does not affect processing carried out before withdrawal.
Some providers, including Google and Amazon, are global companies and may process data outside your own country, including outside the European Economic Area. Where that happens, those providers state that they rely on legal transfer mechanisms such as the European Commission's Standard Contractual Clauses. We do not transfer your data to third parties beyond the providers described here.
We keep personal data only as long as needed for the purpose it was collected for. Server and security logs are kept for a limited period for operation and security and then removed or aggregated. Analytics data is retained according to the settings in our analytics account. Enquiries are kept for as long as needed to handle the matter and any follow-up.
Where the GDPR applies, you have the right to access your personal data and to ask us to correct, delete, or restrict it; to object to processing based on legitimate interest; to data portability; and to withdraw consent where processing is based on consent. To exercise any of these, contact us through our contact page.
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has not been handled properly.
We may update this policy as the site changes or as new providers are added. When we do, we will revise the date shown at the top. For questions about this policy, please use our contact page.