Privacy Policy

Last updated: July 30, 2026

This policy explains how personal data is handled when you visit Verba, subscribe through the embedded Substack form, or contact Verba directly.

Who is responsible for your data

The data controller for Verba is Aleksei Chesnokov, based in Barcelona, Spain. For privacy questions or to exercise your rights, email hi.verba@gmail.com.

What data is processed and why

Visiting the website

The hosting and media infrastructure may process technical data such as your IP address, browser information, requested URL, date and time, and security logs. This is necessary to deliver the website, maintain its security, diagnose failures, and prevent abuse. The legal basis is Verba's legitimate interest in operating a secure and reliable publication.

Audience analytics

If you allow analytics, Google Analytics processes information about visits and interactions, including pages viewed, session information, approximate location, and device or browser characteristics. The legal basis is your consent. Analytics does not load when consent is refused or withdrawn.

Subscribing through Substack

The subscription form is supplied and hosted by Substack. Loading the form connects your browser to Substack, which may receive technical information and use its own cookies or similar technologies. If you submit the form, Substack receives your email address and any other information you provide. Verba may access subscriber information made available to publishers in order to send the newsletter and manage the subscriber relationship. The legal basis for processing the information you submit is your consent and your request to subscribe.

Substack also processes certain data for its own purposes under its Privacy Policy.

Embedded posts from X

Some articles contain posts from X. X's widget script loads only after you allow external content. When loaded, X may receive technical and usage information under its own privacy terms.

Contacting Verba

If you contact Verba by email, the information in your message is processed to respond and manage any follow-up. The legal basis is Verba's legitimate interest in answering correspondence or, when relevant, taking steps at your request before entering an agreement.

Service providers and international processing

Verba uses service providers including Vercel for website hosting, Supabase for public media delivery, Google for optional analytics, Substack for subscription forms and newsletter management, and X for optional embedded posts. Some providers may process data outside the European Economic Area and describe the safeguards they rely on in their own privacy documentation.

How long data is kept

Technical security logs are retained according to the relevant provider's operational schedules. Analytics retention follows the settings configured for the Google Analytics property. Subscriber information is retained while a subscription remains active and as needed to record an unsubscribe request. Email correspondence is kept only as long as reasonably necessary for the conversation, any resulting relationship, and applicable legal obligations.

Your rights

Where the GDPR applies, you may request access, correction, deletion, restriction, portability, or objection to processing. You may withdraw consent at any time without affecting processing already carried out lawfully. Email hi.verba@gmail.com to make a request.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Privacy choices

You can review or change optional technology choices at any time through Cookie settings in the footer. For details, read the Cookie Policy.

Changes to this policy

This policy may be updated when the website, its providers, or legal requirements change. The current revision date appears at the top of this page.