Privacy Policy

Last updated: 4 November 2026

Who we are

This website is operated by Stella Jansen, a novelist and poet based in Amsterdam, the Netherlands. For questions about this policy or your personal data, please use the contact form.

What data we collect and why

Contact form

When you use the contact form at /contact, we collect your name, email address, and message, along with any organisation or subject you provide. This information is used solely to respond to your enquiry. It is transmitted via Postmark (Wildbit LLC, USA) and delivered to Stella Jansen's private email inbox (hosted by Google). We do not store form submissions in a database; once delivered by email, the data is retained only within that email correspondence.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — responding to inbound publishing, press, and reader enquiries.

Spam protection (Cloudflare Turnstile)

The contact form uses Cloudflare Turnstile (Cloudflare, Inc., USA) to check that submissions come from a person rather than an automated bot. Turnstile processes technical information such as your IP address and browser characteristics. It does not use cookies for tracking or advertising. Cloudflare processes this data under its own privacy policy.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — protecting the contact form against spam and abuse.

Cookies

This site uses one cookie:

Images

Book cover images and author photos are stored with Cloudinary (Cloudinary Ltd, Israel / USA) and served via their CDN. No personal data is associated with these image requests.

Fonts

This site uses Cormorant Garamond and Lato, which are served directly from this server. No font data is sent to Google or any third party.

Server logs

Like all web servers, our hosting provider (Render) records standard access logs including IP addresses, page URLs, and timestamps. These are retained for a short period for security and operational purposes.

Data transfers outside the EU

Postmark (USA), Google (USA), Cloudflare (USA), and Cloudinary (USA/Israel) may process data outside the European Economic Area. Where required, these transfers rely on Standard Contractual Clauses or adequacy decisions under GDPR Chapter V.

Your rights

Under the GDPR and Dutch privacy law (AVG), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Object to or restrict processing
• Lodge a complaint with the Dutch supervisory authority

To exercise any of these rights, please use the contact form.

Supervisory authority

If you believe your data has been handled unlawfully, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

autoriteitpersoonsgegevens.nl
Hoge Nieuwstraat 8, 2514 EL Den Haag