Privacy policy

Last updated: 3 November 2026.

Who is responsible

I am the data controller, Leo Paulo, author of Desmonta. For any question about your data, use the contact page and choose "Data protection".

What data I collect

• Your email, the language of your subscription and the moment you gave consent.
• Where the subscription came from (for example, the page you subscribed on) and campaign parameters in the address (utm), when present.
• An encrypted version (hash) of your IP address, used only to stop abuse. I do not store the IP in clear.
• If you fill in the profile form: name, company or project, role, industry, approximate annual revenue, what you are looking for and the message you write. All of this is optional, except what is marked as required in the form.
• If you use the contact form: name, email, company (optional), subject and message.
• When you receive an email from me, the sending service records whether it was delivered, whether you opened it and whether you clicked links.
• When you open, on the site, a link that came from one of my emails, the address carries a random identifier, which is not your email, that lets me link that reading to your subscription. I remove that identifier from the address right after.
• Cookie-free reading measurements on the site: page, the domain you came from, campaign parameters, device type, how far you scrolled and how long the page stayed open, with a visitor identifier that changes every day. I do not store your IP.

What I use it for

• Sending you the Desmonta newsletter and the subscription confirmation email.
• Replying to the messages you send me.
• Understanding your profile to tailor what I send and to let you know about projects that may make sense for you, such as Bitalk, OW Ventures or others. This is never investment advice.
• Measuring how many people read the newsletter and the site, how far they read and which topics interest them, in general and, when you arrive from one of my emails, per subscription.

Legal basis

Your consent (Article 6(1)(a) of the GDPR). You subscribe only after confirming your email (double opt-in) and you can withdraw consent at any time, as easily as you gave it. Measuring site readings relies on my legitimate interest in understanding what is useful to my readers (point (f)), with minimal data and no cookies.

How long I keep it

While your subscription is active. Site reading measurements are erased after 24 months. If you cancel, I keep only the minimum needed to never email you again and to meet legal obligations. If you ask for full removal, I erase your data. Contact form messages are kept for as long as needed to reply to them.

Who processes data for me

• Supabase, for the database (servers in the European Union).
• Netlify, for hosting the site.
• Bird, for sending emails.

These providers process data only on my behalf. Some may involve transfers outside the European Economic Area, always with appropriate contractual safeguards.

Reading measurement

I measure, without cookies and without storing anything on your device, which pages are read, how far people scroll and how long the page stays open. I measure nothing if your browser sends the "Do Not Track" (DNT) signal or Global Privacy Control. Inside the email itself I can only know whether you opened it and clicked links, not how far you read, and opens can be inaccurate, for example because of the privacy protection of some email apps.

Cookies

This site does not use analytics or advertising cookies. I only store, in your browser, your choice between light and dark mode.

Your rights

You can ask for access, rectification, erasure, restriction or portability of your data, object to processing and withdraw consent. You can also lodge a complaint with the Portuguese data protection authority, the CNPD (cnpd.pt).

Cancelling your subscription

Every email has a link to cancel your subscription, and your email app may also show a direct unsubscribe button.