Privacy and cookies
This page explains what we collect when you read or subscribe to Behind the Bank, why, and the choices you have. Last updated: [TODO: date of review].
Who we are
Behind the Bank ("we") is the controller of the data described here. Contact: hello@behindthebank.com. Postal address: [TODO: legal entity name and registered address].
What we store when you subscribe
- Your email address and subscription status (subscribed, unsubscribed, or waiting for confirmation).
- confirmed_at: the time you clicked the confirmation link (double opt-in), so we can show you agreed to receive the newsletter.
- Attribution data, only if it was in the link you arrived from: the campaign tags
utm_source,utm_medium,utm_campaign,utm_contentandutm_term; the referring page (referrer); and ad click IDsgclid(Google Ads),fbclid(Meta) andli_fat_id(LinkedIn). Each value is capped at 500 characters.
Why: to send the newsletter you asked for, to prove consent to receive it, and to understand which channels and campaigns bring readers so we can spend our marketing budget sensibly. Attribution data is read from the page address when you submit the form; it is not collected through cookies. [TODO: confirm lawful basis: consent for the newsletter; legitimate interests for attribution?]
Retention: we keep your subscription data while you are subscribed. After you unsubscribe we keep [TODO: retention period, e.g. a suppression record so we never email you again, and how long attribution data is kept]. You can ask us to delete your data at any time by emailing hello@behindthebank.com.
Cookies and tags
Marketing and analytics tags load only if you click Accept in the cookie banner. If you click Reject, or make no choice, none of them load. Before you choose, Google Consent Mode is set to "denied" for advertising and analytics storage.
- Your consent choice (essential). Stored in your browser's local storage under
btb_consentso we don't ask on every page. It holds only "accepted" or "rejected" and the date. [TODO: how long before we ask again?] - Google Analytics 4 (after consent). Measures visits and which pages and campaigns lead to sign-ups. Sets first-party cookies such as
_gaand_ga_*. [TODO: confirm GA4 data-retention setting once the property exists.] - Google Ads (after consent). Records that a confirmed sign-up came from one of our ads, so we can measure ad performance. May set cookies such as
_gcl_au. - LinkedIn Insight Tag (after consent). Records sign-ups from LinkedIn campaigns and gives us aggregated audience reports. May set cookies on linkedin.com and our site (for example
li_fat_id,lidc,bcookie). - Vercel Web Analytics (always on, no cookies). Counts page views in aggregate without cookies or cross-site identifiers, so it does not need consent.
Exact cookie names and lifetimes are set by Google and LinkedIn and can change; see their documentation linked below.
Changing or withdrawing consent
Use (also in the footer) to accept or reject at any time. Rejecting after accepting stops the tags from loading on future pages; you can also clear cookies for this site in your browser. Every newsletter has a one-click unsubscribe link.
Who processes data for us
- Resend: stores the subscriber list and sends our emails.
- Vercel: hosts the website and provides cookieless Web Analytics.
- Google: Google Analytics and Google Ads, only after consent (Google privacy policy).
- LinkedIn: LinkedIn Insight Tag, only after consent (LinkedIn privacy policy).
Some of these providers process data outside your country, including in the United States. [TODO: confirm transfer safeguards (e.g. SCCs / DPAs signed with each processor).]
Your rights
You can ask for a copy of your data, its correction or deletion, or object to its use, by emailing hello@behindthebank.com. [TODO: list applicable laws (e.g. Singapore PDPA, UK/EU GDPR) and the supervisory authority you can complain to.]