LEGAL
Privacy Policy
Last updated: 27 March 2026
Who we are
Heritech is an independent media project operated by Ekaterina Kuranova, Řehořova 908, Prague 130 00, Czech Republic. IČO: 19738447. Contact: hello@heritech.co. Website: heritech.co.
What data we collect and why
We collect email addresses when you subscribe to our newsletter. This data is used solely to send you the newsletter you requested. We do not collect any other personal data, we do not use analytics tools, and we do not track your behaviour on this website.
Legal basis for processing
Newsletter subscriptions are processed on the basis of your freely given consent (GDPR Art. 6(1)(a)). You may withdraw your consent at any time by clicking the unsubscribe link in any email. If you make a voluntary financial contribution, the processing of payment data is carried out on the basis of the performance of a transaction (GDPR Art. 6(1)(b)) by our payment processor Stripe.
Email service
Email addresses are stored and managed via Resend (resend.com), a transactional email service. Resend processes data in accordance with GDPR and provides Standard Contractual Clauses for any international data transfers. You can find Resend's privacy policy at resend.com/privacy.
Database
Subscriber data (email address, subscription status, and confirmation tokens) is stored in Supabase (supabase.com), a database platform hosted on AWS in the EU (Frankfurt region). Supabase acts as a data processor on our behalf. You can find Supabase's privacy policy at supabase.com/privacy.
Payments
If you choose to support the project financially, payments are processed by Stripe (stripe.com). We do not store your payment card details — they are handled entirely by Stripe. You can find Stripe's privacy policy at stripe.com/privacy.
Hosting
This website is hosted on Vercel (vercel.com). Vercel may process technical data (such as IP addresses) as part of normal web hosting operations. See vercel.com/legal/privacy-policy.
Cookies
We use only strictly necessary cookies: a session cookie required to remember your consent choice. We do not use advertising, analytics, or tracking cookies.
Your rights (GDPR)
You have the right to access, correct, delete, or receive a portable copy of your personal data at any time. To unsubscribe from the newsletter, click the unsubscribe link in any email. For other requests, contact us at hello@heritech.co. You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.cz.
Data retention
Email addresses of confirmed subscribers are retained until you unsubscribe. Unconfirmed email addresses (pending double opt-in) are deleted automatically after 48 hours.
Changes to this policy
We may update this policy from time to time. The date at the top of this page will reflect when it was last changed.
hello@heritech.co