Privacy
Last updated: 1 November 2026.
Who is responsible
Isak Vidinghoff, a sole trader (enskild näringsidkare) in Sweden, is responsible for (the "controller" of) the personal data on this site. Write to hello@isakvidinghoff.com with any question or request. You'll get an answer within one month.
This site runs no analytics scripts, trackers or ads, and sets no cookies of its own. It loads nothing from other companies' servers, with one exception: the bot check on the sign-up form comes from Cloudflare, which may set one short-lived cookie of its own while the check runs.
What is collected, why, and for how long
- When you open a page. Cloudflare, which serves the site, sees your IP address, the page, the time, your browser and the referring page in passing. To count distinct visitors, the site keeps a scrambled code made from your IP address and browser with a secret key that is new each day. Each visit adds one to a daily total for that page and link. Why: knowing which pages and links are used (legitimate interest). How long: the codes and the day's key are deleted by 2 a.m. the following night (Swedish time); only the daily totals remain.
- When you use the purpose self-check. Nothing is sent anywhere. Your answers stay in your own browser's storage because you asked for the check to work, and "Start over" clears them.
- When you sign up for the free book or a free email course. Your email address (needed to send anything), the first name if you give one (optional, and not used in the emails), which boxes you ticked, which version of the wording you agreed to, and when you confirmed. All of it is kept at MailerCloud, the email service. Why: sending you the confirmation email and then the course you asked for (your consent). How long: until you unsubscribe. If you never click the confirmation link, you are not added to the list and get nothing more; MailerCloud keeps the unconfirmed sign-up until unconfirmed sign-ups are cleared, which happens at least every 90 days, and you can ask for it to be deleted sooner.
- When you also tick "email me now and then about Isak's books and courses". The same details, with a note that you said yes to these emails. Why: sending you occasional emails about books and courses, including paid ones (your consent, given separately from the course). How long: until you unsubscribe.
- When you unsubscribe. Your address stays on MailerCloud's do-not-email list. Why: never emailing you again by mistake (legitimate interest). How long: for as long as the list exists. Ask and it is removed, though you could then be signed up again by mistake.
- When you write to hello@isakvidinghoff.com or reply to one of Isak's emails. Your message and address. Why: answering you (legitimate interest). How long: until the conversation is finished, at most 12 months.
Nothing else is collected by this site. Your data is never sold, and no automated decisions are made about you.
Which link brought you. If you arrived through a tagged link (for example from Pinterest or a podcast), the sign-up adds one to a daily total for that link. The tag is never stored with your address.
How signing up works. The form sends your details through a small Cloudflare service straight to MailerCloud; no sign-up is stored on the site itself. To keep the form from being abused (legitimate interest), two checks run first. Cloudflare Turnstile checks that a person, not a script, filled in the form, using your IP address and browser details. And to stop anyone using the form to flood an inbox, a scrambled code made from your address with a secret key (not the address itself) is kept for 24 hours, so the same address can sign up at most three times a day. You get one email asking you to confirm, and nothing else is sent until you click it, so nobody can sign you up without you knowing. Every email has an unsubscribe link. If your address has already unsubscribed, bounced or been reported as spam at MailerCloud, the sign-up is not added.
Who else handles it
- MailerCloud (United Kingdom), under its data processing agreement: holds the email list and sends the confirmation, course and other emails.
- Cloudflare (United States), under its data processing agreement: serves this site, passes the sign-up form on to MailerCloud and runs the bot check. It sees your IP address, the pages you open and the form in passing, and keeps its own short-lived request and security logs. Only the 24-hour scrambled code and the daily totals described above are stored.
- Mutant Mail (Fresent, United States): receives email sent to addresses at isakvidinghoff.com and forwards it to Isak's inbox.
- Google (United States): Isak's personal Gmail inbox, where those messages end up.
Outside the EU. The EU recognises the UK's data protection as adequate, so MailerCloud can hold your data on that basis; any of its own suppliers outside the UK and EU are covered by the transfer safeguards in its agreement. Cloudflare and Google are certified under the EU-US Data Privacy Framework. Mail you send to an isakvidinghoff.com address passes through Mutant Mail in the United States on its way to Isak's inbox. Mutant Mail has not offered a data processing agreement or other transfer safeguard, so it handles that mail only so that your message reaches Isak (legitimate interest), and it is being replaced by a provider that does.
Links to other sites
The podcast pages link to Spotify, Apple Podcasts, YouTube and other apps. Those sites have their own privacy rules once you follow a link.
Your rights
You can ask to see what is held about you and get a copy, to have it corrected or deleted, to restrict or object to how it is used (including objecting to marketing emails at any time), and to get the data you gave in a machine-readable form. You can withdraw your consent at any time with the unsubscribe link or by writing to hello@isakvidinghoff.com; that doesn't affect what was done before you withdrew. If you're unhappy with how your data is handled, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to the authority where you live.
Changes
If this page changes, the date at the top changes too. If a change affects data you've already given, subscribers are told by email.
