Privacy

In force from 4 November 2026.

Point Free ApS, Gunderupvej 16, 9260 Gistrup, Denmark, CVR 46560590, runs point.free and is the controller. Write to privacy@point.free.

What is kept, and why

• Your visits. Counted with tidekeeper, Point Free ApS’s own analytics: the page, how long it was open, the page or site you came from (with any campaign it names, such as utm_source), the country, the kind of device, the browser and the system, the screen’s width in one of four groups, and what you do that the site counts: links to other sites, files, feeds, copied code, the theme, and the newsletter’s card. Your address and your browser’s line are used only in memory, to make a key that groups one day’s views, and that key is thrown away at midnight. Neither is stored. The counts are kept 13 months and say nothing about who anyone is. Basis: our legitimate interest in knowing what is read, and what brings readers here.
• If you let us recognise you. point.free asks whether it may recognise you when you come back. Only if you say yes, your browser keeps a cookie, tk_v, holding a random number your browser made, with what you allowed and when, and what you read here from then on is kept under that number: each visit’s pages and events and when, where the visit came from (the site or page, and any campaign it names), the country, the kind of device, the browser and the system. It holds neither your address nor your browser’s line, and it is never joined to an email address. To see which posts bring people back, and what brought them; the totals, never anything about one reader, also help in talks with sponsors. Basis: your consent. The cookie lasts up to six months from your yes, and then you are asked again; Safari, and every browser on an iPhone or iPad, deletes it sooner, after seven days without a visit. What is kept under it is deleted 90 days after your last visit. You can change your answer at any time under Privacy choices, at the foot of every page: stop being recognised, or have what is kept under your number deleted, which we do within a month.
• Your answer to that question. If you say no, a cookie, tk_n, remembers it for up to six months, with no number in it, so that you are not asked again; a browser that sends Global Privacy Control is taken as a no and not asked. Each answer is recorded as proof of what was asked and said: the version of the question, what was allowed, when, how you answered and how long it took, the language and the kind of device, and your number if you said yes. One with no number is kept 13 months; one with your number as long as what is kept under it, and, if you have that deleted, as the record that it was. Basis: our legal obligation to be able to show consent.
• If you subscribe. Your email address, which letters you chose, and the record of how you agreed: when, on which page, the words the form showed, and the click in the confirmation mail. Nothing comes before that click, and an address that is never confirmed is deleted after 30 days. The letters hold no tracking picture, and their links name the letter, never you. You can leave with one click at the foot of any letter. The record of how you agreed is kept while you are subscribed and for two years after the last letter, so that it can be shown. Basis: your consent.
• On your device. The cookies above, and only once you answer; a small note if you close or use the newsletter’s card (tk_s, with no number in it), so that it does not ask again; your choice of light or dark, if you make one; and, until you close the tab, where the top bar stood, so that it does not jump between pages.

Who else sees it

• GitHub (GitHub, Inc., USA) serves these pages, so it sees your address in order to send them. Its privacy statement applies, and it moves what it holds out of the EU under the EU–US Data Privacy Framework and the EU’s standard contractual clauses.
• tidekeeper counts the visits, keeps the answers and sends the letters, from Point Free ApS’s own server in Germany. The providers it uses are listed at tidekeeper.eu/subprocessors.
• Other sites, in some posts: a video from YouTube (in its privacy-enhanced mode) or Vimeo, a post or comments from Mastodon (toot.community), or a picture kept elsewhere, such as on catbox.moe or Wikimedia. Opening such a post lets your browser fetch it from them, and they see your address, under their own terms.

What you can do

Write to privacy@point.free to ask what we hold about you, to have it corrected or deleted, to take it with you, or to object. The counts say nothing about who anyone is, so there is nothing in them to find you by. For what is kept under your number, ask under Privacy choices and give us the number it shows. Leaving the newsletter is one click in any letter. You can also complain to Datatilsynet, Denmark’s data protection authority, at datatilsynet.dk.