Effective date: August 19, 2026

The short version

I run carmenonchain.ai as an independent writer. The only personal information I deliberately collect is your email address, and only if you choose to sign up for my newsletter. I use privacy-friendly, cookieless analytics, I do not run ads, and I do not sell your information to anyone. You can unsubscribe or ask me to delete your data at any time.

Who I am

This site is operated by Carmen Pangilinan, operating as "Carmen Onchain" ("I," "me"). For any privacy question or request, contact me at [email protected].

What I collect, why, and the legal basis

1. Your newsletter email address. How: you enter it in the signup form and confirm it by clicking a link I email you (a double opt-in). Why: to send you my free newsletter and manage your subscription. Legal basis (for readers in regions that ask): your consent, which you give by confirming your signup. You can withdraw it anytime by unsubscribing.

2. Basic technical information (server and security logs). Collected automatically when any website is visited (your IP address, browser type, the pages you request, timestamps), to keep the site secure, working, and to fix problems. Legal basis: my legitimate interest in running a secure, functioning site.

3. Privacy-friendly analytics. My content-delivery provider, Cloudflare, provides aggregate, cookieless visitor statistics (how many people visit, which posts are popular, general country and device breakdown). It does not track you across other websites and does not build a profile of you.

I do not knowingly collect any sensitive information (such as health, financial account, or government-ID data), and the newsletter does not ask for it.

Cookies

The site uses only strictly-necessary cookies (for example, to keep you logged in if you are a member, and for security). It does not use advertising or cross-site tracking cookies. Because of this, you should not see a cookie consent popup. Full detail is in my separate Cookie Notice.

Who I share it with

I do not sell or rent your information. I share it only with the service providers that help me run the site and send the newsletter, and only so they can do that job: Hostinger (the server that hosts the site); Cloudflare (delivers and secures the site; provides the cookieless analytics); and Mailgun (delivers the newsletter to your inbox). Each acts on my instructions under its own privacy and security terms. I may also disclose information if the law requires it.

I do not sell your personal information

I do not exchange your personal information for money, and I do not share it for advertising. This statement is also my response to any "do not sell" request under US state laws, including Nevada.

How long I keep it

I keep your email address for as long as you are subscribed. If you unsubscribe, if your address stops working, or if you ask me to delete it, I remove it. Security and server logs are kept only for a short operational period and then discarded.

Your rights and how to use them

Wherever you live, you can ask me to: unsubscribe from the newsletter (there is a one-click link at the bottom of every email); delete your information (right to erasure); access a copy of what I hold about you; correct your information; or opt out of any "sale" of your information (I do not sell it, so this is already the case).

To make any of these requests, email [email protected]. I will respond within 30 days (and within 60 days for Nevada "do not sell" requests). I may need to confirm your identity, usually just by confirming you control the email address in question.

Region-specific notes

Nevada. Nevada law lets a website operator's consumers ask them not to sell their covered information. My designated request address for this is [email protected], and as stated above, I do not sell your information.

California. I am an independent individual and do not meet the size thresholds that make the California Consumer Privacy Act apply to me. Even so, I honor access, deletion, and correction requests as described above, and I do not sell or share your information for cross-context advertising.

Europe, the United Kingdom, Canada, Brazil, and elsewhere. My newsletter runs on your consent, you can withdraw it anytime, and I honor access and deletion requests. If you are in one of these regions and have a concern, contact me first; you also have the right to complain to your local data-protection authority.

Children

This site and newsletter are intended for adults. The content is not directed to children under 13, and I do not knowingly collect information from anyone under 13. You must be at least 16 years old to subscribe to the newsletter. If you believe a child under 13 has given me their information, email me and I will delete it.

Security

I take reasonable measures to protect your information, including serving the site over an encrypted (HTTPS) connection and limiting who can access the subscriber list. No method of transmission or storage is perfectly secure, but because I collect so little (essentially just email addresses), the risk is kept low.

Changes to this notice

If I make a material change, I will update the effective date at the top and, where appropriate, note it on the site. Please check back occasionally.

Contact

Questions or requests: [email protected].