Privacy Policy

Who we are

The Atlas mailing list is run by Coda Story, which is the sole data controller for the personal data described in this policy. If you have any questions about how your data is used, contact us at simon@codastory.com.

What we collect

• Your email address, when you sign up by email.
• Your phone number and Signal handle, when you sign up via Signal.
• A transient SHA-256 hash of your IP address, used only for short-term rate limiting and abuse prevention. This hash is deleted within about an hour.
• A record of your sign-up (date and time, the consent wording shown, your IP address and browser), kept as proof of your consent.

Why we use it

• To send you The Atlas newsletter.
• To keep the signup process secure and prevent abuse.

Lawful basis

• Consent — for sending you the newsletter. You can withdraw your consent at any time.
• Legitimate interests — for security and rate limiting to protect the signup process.

Who else processes your data

We use the following processors to deliver The Atlas:

• Beehiiv — our email delivery platform, based in the United States. Emails are sent from a codastory.com address via Beehiiv.
• Signal — used for the Signal signup path.

International transfers

Your personal data is transferred to and processed in the United States by Beehiiv. These transfers are made under the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss FADP provisions where applicable), as set out in Beehiiv's Data Processing Addendum.

Retention

We keep your email address for as long as you are subscribed to The Atlas. If you unsubscribe, your record is marked inactive and suppressed so that we do not contact you again, and we delete it on request. We also keep a record of your sign-up — the date and time, the consent wording you were shown, and basic technical details such as your IP address and browser — as proof of consent, for as long as you are subscribed. Rate-limiting data is deleted within about an hour.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased;
• restrict how we process your data;
• data portability;
• object to processing;
• withdraw your consent at any time.

You also have the right to lodge a complaint with your local supervisory authority.

How to unsubscribe

Every email includes an unsubscribe link, and you can opt out at any time.

Contact for data requests

To make a data request, contact us at simon@codastory.com.