Privacy Policy
This Privacy Policy explains what information the website at unclemini.com (the "Site") collects, why it is collected, the legal basis for processing under the EU General Data Protection Regulation (GDPR) and Icelandic data-protection law, how long the data is kept, and what rights you have.
Email: support@unclemini.com
1. What the Site collects, why, and on what legal basis
The Site collects only the minimum needed to operate a public marketing website and email newsletter. The following table summarises what is collected, the purpose, the GDPR legal basis (Article 6), and the provider involved.
| Data | Purpose | Legal basis | Provider |
|---|---|---|---|
| Page views, referrer, country, device type, anonymised IP | Aggregate analytics - which pages are popular, where visitors come from, performance. | Consent (Art. 6(1)(a)) | Google Analytics 4 |
| Email address, optional first name | Delivery of the Uncle Mini newsletter and occasional product updates if you subscribe. | Consent (Art. 6(1)(a)) | Kit (formerly ConvertKit) |
| Server access logs (IP, user agent, timestamp, requested URL) | Security, fraud prevention, abuse detection. | Legitimate interest (Art. 6(1)(f)) | Netlify (hosting) |
Google Analytics 4 is configured so that full IP addresses are not collected or stored - only an anonymised, country-level approximation is retained. Google's own privacy practices apply when data reaches their servers; see policies.google.com/privacy for details.
2. What the Site does not collect
- No advertising trackers, retargeting pixels, or third-party advertising cookies.
- No browser fingerprinting, behavioural profiling, or session-replay tools.
- No special category personal data (health, religion, political opinion, biometric, etc.).
- No personal information beyond what you voluntarily provide (e.g., your email when subscribing).
- No data from any Uncle Mini app you may use - those apps run entirely in your browser and never transmit workspace data to the Site.
3. Cookies and similar technologies
The Site uses a minimal set of cookies, set only after explicit consent on first visit (the consent banner). If you decline, no analytics cookies are set and no analytics data is sent. You can withdraw consent at any time by clearing cookies for this domain in your browser, or by using the consent banner re-prompt where shown.
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
| _ga | Google Analytics - distinguishes unique visitors. | 2 years | Analytics (consent-gated) |
| _ga_W90W5F0G36 | Google Analytics 4 - session state for the Uncle Mini property. | 2 years | Analytics (consent-gated) |
| uncle_mini_consent | Stores your consent choice so the banner does not repeat on every visit. | 12 months | Strictly necessary (no consent required under ePrivacy) |
Newsletter subscriptions do not require cookies. Visiting the Site without accepting analytics is fully supported - the Site works the same either way.
4. Purchases (handled by Gumroad)
Purchases of Uncle Mini products are processed by Gumroad, an independent payment platform. The Site itself does not handle, store, or transmit payment information. When you buy a product, your name, email, and license key are passed from Gumroad to the relevant Uncle Mini app for license activation - this is described in detail in each product's own Privacy Policy.
5. Newsletter
If you subscribe to the Uncle Mini newsletter, your email address (and optional first name) are stored by Kit and used solely to deliver the newsletter and occasional product updates - typically no more than two emails per month. Subscribers may unsubscribe at any time via the link in any email; unsubscribed contacts are removed from the active mailing list within 7 days. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
6. Data retention
- Analytics data is retained for 14 months in Google Analytics, after which it is automatically deleted.
- Newsletter subscribers remain on the list until they unsubscribe or request deletion.
- Server access logs are retained briefly by Netlify (typically 30 days) for abuse prevention, then deleted.
- Backup copies of newsletter records may persist in provider backups for up to 90 days after deletion before being purged.
7. Sharing and disclosure
Uncle Mini does not sell, rent, or trade personal data. Personal data is shared only with the third-party processors listed in section 1 (Google, Kit, Netlify) - each acting under a written data-processing agreement and bound to use the data only for the agreed purpose.
Personal data may be disclosed without further notice if required by Icelandic or EU law, by court order, or if necessary to investigate suspected fraud, security incidents, or violations of these Terms.
8. International data transfers
The Site uses providers headquartered outside Iceland - Google Analytics (United States), Kit (United States), Netlify (United States). Where personal data is transferred from the EEA or Iceland to the United States, the transfer is protected by either the EU-US Data Privacy Framework certification or by Standard Contractual Clauses adopted by the European Commission, ensuring an adequate level of protection.
9. Security measures
Uncle Mini takes commercially reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include: encrypted transport for all Site traffic (HTTPS/TLS), encryption at rest by hosting and email providers, restricted access to admin tooling, two-factor authentication on critical accounts, and regular review of third-party processors. No method of transmission over the internet or storage is 100 % secure - while Uncle Mini strives to use commercially acceptable means, it cannot guarantee absolute security.
10. Data breach notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, Uncle Mini will notify the Icelandic Data Protection Authority (Persónuvernd) within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where the breach is likely to result in a high risk, affected individuals will be notified directly without undue delay.
11. Automated decision-making and profiling
Uncle Mini does not engage in automated decision-making or profiling that produces legal or similarly significant effects. The Site does not use AI to make decisions about visitors.
12. Your rights
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar data-protection laws, you have the right to:
- Access the personal data Uncle Mini holds about you and receive a copy.
- Rectification - correct inaccurate or incomplete data.
- Erasure - request deletion of your data ("right to be forgotten").
- Restriction - limit how Uncle Mini processes your data.
- Portability - receive your data in a structured, machine-readable format and transmit it to another controller.
- Object to processing based on legitimate interest.
- Withdraw consent at any time, where processing is based on consent.
- Opt out of direct marketing at any time - including newsletter unsubscribes, which take effect within 7 days of request.
- Lodge a complaint with a supervisory authority - in Iceland, this is Persónuvernd (personuvernd.is); in other EEA countries, the equivalent authority for your country of residence.
To exercise any of these rights, email support@unclemini.com. Requests are responded to within 30 days. Uncle Mini may need to verify your identity before fulfilling a request.
13. Children's privacy
The Site is not directed at children under 16, and Uncle Mini does not knowingly collect personal information from children. If you believe a child has submitted information through the Site, contact support@unclemini.com and the data will be deleted promptly.
14. Changes to this Policy
This Privacy Policy may be updated from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via the homepage and via the newsletter where appropriate, with at least 30 days' notice before they take effect.
15. Contact
Questions about this Privacy Policy, your data, or how to exercise your rights? Email support@unclemini.com. The data controller is Uncle Mini, based in Reykjavík, Iceland.