Privacy and consent
Newsletter Privacy Notice
Plain-language details about consent, retention, service providers, optional rewards, and the choices that remain yours.
Policy version: 16 August 2026
How the newsletter handles your data
This notice explains the data used for consent, delivery, inactivity management, and optional one-time Minecraft rewards.
Who operates the newsletter
Peaceful Vanilla Network operates this newsletter in Italy. Privacy and rights requests can be sent to contact@peacefulvanilla.club.
What we use and why
We use your email address, double-opt-in evidence, delivery and suppression events, approximate opens, tracked link clicks, and explicit actions such as confirmation, unsubscribe, reactivation, or reward redemption to send the PVC updates you requested. Marketing is based on your consent. Necessary abuse prevention, security, and delivery records are processed only to protect and operate the service.
Short-lived Cloudflare diagnostics record a correlation ID, method, normalized route, response status, duration, and provider request metadata that can include an IP address and basic network or user-agent details. Our application does not add email addresses, claim values, Minecraft names, message bodies, authorization headers, signatures, or secrets to those logs.
HTML emails include Resend's standard open pixel and tracked links. Opens are approximate because some email clients block or preload images; clicks are the stronger activity signal. We use these signals to avoid repeatedly mailing inactive addresses, manage cooling and standby, and diagnose delivery. The plain-text alternative contains the same links but no open pixel. We do not use these signals for advertising profiles or significant automated decisions.
If you choose a reward, we also process an opaque entitlement, your verified Minecraft UUID, and delivery receipts. We do not ask for a Minecraft nickname at signup. We do not use purchased lists or third-party article-reading profiles.
Processors and international transfers
Cloudflare provides the API, abuse protection, and D1 storage. Resend provides email delivery and contact management. GitHub and Vercel host the static source and public website but are not used as the subscriber database. Where a provider processes data outside the EEA, Peaceful Vanilla Network relies on the provider's applicable data-processing terms and transfer safeguards.
How long we keep it
Active subscription data is kept while the subscription is used. Addresses with no recent qualified activity move through a limited cooling period before standby, where regular newsletters stop. A consented standby address is retained for no more than 24 months after the last qualified interaction, then re-consent is requested or the recoverable email is anonymized or deleted. Pending opt-in records expire after 30 days. Short-lived abuse identifiers expire within 30 days. Reward and delivery records are kept only as long as needed to prevent duplicate claims, resolve disputes, and meet documented legal obligations. Native Cloudflare diagnostic logs expire automatically after three days on the current plan and are not copied into D1.
Unsubscribing stops marketing immediately. A minimal suppression record may be retained so the address is not accidentally added again and to demonstrate that the withdrawal was respected.
A tracked link clicked from an earlier email can return a standby subscription to active status. Submitting the signup form again uses double opt-in before reactivation. Delivery failures, complaints, and provider suppressions always take priority and prevent sending until they are resolved lawfully.
Your choices and rights
You may withdraw consent or object to direct marketing at any time using the unsubscribe link in every email. You may also request access, correction, deletion, restriction, or portability where applicable. You can complain to the Italian Data Protection Authority or the authority where you live or work. Withdrawing consent does not make earlier lawful processing unlawful.
Newsletter consent is optional and is never required to access the website or Minecraft server. No solely automated decision produces legal or similarly significant effects.
