What we know about you, and what we do with it

Who is responsible

The data controller is AloPerks, an editorial desk operated from ul. Szewska 14/3, 31-009 Kraków, Poland. You can reach us at contact@aloperks.com or by post at that address. We are small enough that the person answering is one of the two editors.

This notice is written to meet the General Data Protection Regulation (GDPR), which applies to us because we are established in Poland, and the United States CAN-SPAM Act, which applies to any commercial email we might send to readers in the United States.

If you subscribe to the digest

We keep the minimum needed to send you a monthly email and prove you asked for it:

We do not ask for your name, and if you give it in an email we do not add it to the list. We do not buy, rent or scrape addresses, and we never add an address to the list that did not ask to be there. If you believe your address was subscribed by someone else, tell us and we will remove it and note the source.

Open and click tracking is a standard feature of the sending service we use. We look at it in aggregate (for instance, "the ending-soon section was opened by 61% of readers"). We do not build profiles of individual readers and we do not use the data to send anyone different content.

If you visit the website

aloperks.com is a set of static pages. There is no analytics script, no advertising, no tracking pixel and no cookie set by us. The only third-party request the page makes is to Google Fonts for the typefaces; Google's handling of that request is covered by Google's privacy policy. If you would rather not make that request, your browser's font-blocking or content-blocking settings will stop it and the site will fall back to system fonts.

Our hosting provider keeps ordinary web-server logs (IP address, requested page, time, browser string) for security and troubleshooting. These are rotated automatically and we do not export or analyse them.

If you write to us

Emails to contact@aloperks.com are kept in our mailbox so we can answer them and, where a reader reports a perk change, so we can show later what we were told and when. Correspondence that leads to a published correction is kept for as long as the correction is relevant; other messages are deleted after two years.

If you ask a question that we answer in the digest, we quote it without your name or any identifying detail unless you ask us to credit you.

Services we rely on

• Email delivery. The digest is sent through ElasticEmail, a transactional and marketing email service. ElasticEmail stores the subscriber list on our behalf, handles unsubscribe requests made through the link in each issue, and records delivery and engagement events. It is bound by a data processing agreement and may process data on servers inside and outside the European Economic Area under standard contractual clauses.
• Web hosting. The site is served from a hosting provider in the European Union that keeps the server logs described above.
• Typefaces. Google Fonts, as described in the visitors section.

Nobody else receives subscriber data. We do not sell it, share it with the programs we track, or use it for anything other than sending the digest and running the list.

How long we keep things

• Subscriber email address and sign-up record: until you unsubscribe, plus 30 days so that the removal can be shown if questioned. After that it is deleted from the sending service and from our records.
• Delivery and engagement events: 12 months, then deleted.
• Correspondence: two years, or longer where it supports a published correction.
• Server logs: handled by the hosting provider on a rolling basis, typically 30 days.

Your rights

Under the GDPR you can ask us to tell you what we hold about you, correct it, delete it, restrict how we use it, give it to you in a portable format, or object to our processing. You can withdraw consent to the digest at any time by unsubscribing; that does not affect anything done before you withdrew.

To exercise any of these, email contact@aloperks.com from the address in question, or write to the postal address above. We answer within one month. There is no charge.

If you think we have handled your data badly, you can complain to the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), at ul. Stawki 2, 00-193 Warsaw, or to the authority in your own EU country. We would appreciate the chance to fix the problem first, but you are not required to give us one.

Children

The digest is about membership programs and is not aimed at anyone under 16. We do not knowingly keep the address of anyone under 16; if you tell us we have one, we delete it.

Changes to this notice

When we change this notice we update the version and date at the top of the page and mention the change in the next digest. Changes that expand what we collect will not apply to existing subscribers unless they agree.

Version 3 (September 2026): added the paragraph on Google Fonts and clarified retention of engagement events. Version 2 (January 2026): named ElasticEmail as the sending service. Version 1 (June 2025): first published.

Contact