Blog emails: how we handle your address
This notice covers the NoeNao blog's email list. Our Privacy Policy covers everything else, including your rights and how to make a complaint.
Who sends the emails
NoeNao Pty Ltd, from hello@noenao.com. Write to that address with any question, to ask what we hold about you, or to ask us to erase it.
What we keep
- Your email address.
- The words you agreed to, and their version.
- The blog page you subscribed from.
- When you asked, confirmed and unsubscribed.
- The codes in your confirm and unsubscribe links, in scrambled (hashed) form only. The confirmation email itself, which contains those links, stays in our sending mailbox until it is removed (see below).
To stop abuse, we count sign-up requests from each connection using a scrambled form of its IP address. Each count covers one hour. Whenever our service checks a rate limit, it deletes counts that expired more than a day earlier, so they normally go within two days. Our hosting providers keep standard request logs, which include IP addresses, for a short time.
What we use it for
Only to send you new NoeNao articles and the emails that confirm or manage your subscription. You are not subscribed until you confirm. We do not use your address for anything else, sell it, or share it with advertisers.
Who handles it for us
Supabase stores the list and runs the sign-up service, Google Workspace sends the emails, and Netlify serves these pages. They may process data outside Australia, as our Privacy Policy explains.
How long we keep it
- Never confirmed: erased at the first daily clean-up after 30 days have passed since your last request. The confirmation link stops working after 48 hours.
- Subscribed: kept while you stay subscribed. These clean-ups never erase an active subscription.
- Unsubscribed: we stop emailing you straight away. If you are still unsubscribed 365 days after you unsubscribed, the record that you agreed and then unsubscribed is erased at the first daily clean-up after that.
- Copies of the confirmation email in our sending mailbox, and any bounce or automatic reply to it: removed from that mailbox within 60 days. Google, which runs the mailbox, may keep deleted mail for a limited time under its own deletion process.
- After erasure we keep only a scrambled form of your unsubscribe code and the time it was erased, so that an old unsubscribe link still works. It does not contain your address.
- Erased records can remain in our encrypted backups for a limited time, until those backups expire, as section 9 of our Privacy Policy explains.
We do not send reminder emails before these erasures. If you sign up again later, that is a new request, and you confirm it again. While your record exists, it keeps the history of your earlier sign-ups and unsubscribes.
Your choices
Every email we send has an unsubscribe link, and unsubscribing takes effect at once. To have your details erased sooner, or for anything else, write to hello@noenao.com.