Privacy Policy
Last updated: April 2026
Who operates this site
MailStack (themailstack.com) is operated by Ady (the "controller" for UK GDPR purposes). Contact: ady@themailstack.com.
ICO registration number: [Add your ICO registration number once obtained — required before launch]
What data we collect
MailStack collects minimal personal data. Specifically:
Analytics data (anonymised): We use Cloudflare Web Analytics to understand how visitors use the site — which pages are visited, approximate geographic location (country level), and referring sites. Cloudflare Web Analytics is cookieless and does not collect personally identifiable information. No IP addresses are stored in a form that can identify individual visitors.
What we do not collect:
- Email addresses (no newsletter signup at launch)
- Names or account information
- First-party cookies
- Cross-site tracking data
- Advertising pixels (no Meta Pixel, no Google Ads tag)
Cookies
This site does not set cookies. Cloudflare Web Analytics uses a privacy-preserving approach that does not require cookies. No cookie consent banner is displayed because none is required.
When you click an affiliate link and visit a tool's website, that site will set its own cookies as described in its privacy policy. We are not responsible for third-party cookies set on other websites.
Data processors
Cloudflare provides hosting (Cloudflare Pages) and analytics (Cloudflare Web Analytics). Cloudflare acts as a data processor for the site. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Affiliate programmes: When you click an affiliate link on this site, you are directed to a third-party website (Klaviyo, Omnisend, GetResponse, etc.). Each of those sites processes your data under their own privacy policy. We are not a party to that data processing.
Legal basis for processing
The anonymised analytics data collected via Cloudflare Web Analytics is processed on the basis of legitimate interests (understanding site performance, identifying technical issues). No personal data is processed for this purpose — the analytics data cannot identify individual visitors.
International data transfers
Cloudflare operates a global network. Anonymised analytics data may be processed in data centres outside the UK. Cloudflare has standard contractual clauses in place that cover international transfers under UK GDPR.
Your rights
Under UK GDPR, you have the following rights:
- Right of access: You can request a copy of any personal data we hold about you.
- Right to rectification: You can request correction of inaccurate data.
- Right to erasure: You can request deletion of your data.
- Right to restriction: You can request restriction of processing.
- Right to portability: You can request your data in a portable format.
- Right to object: You can object to processing based on legitimate interests.
Because we collect only anonymised, non-identifiable analytics data, it is not possible for us to identify which data (if any) relates to a specific individual. If you submit a data subject request, we will respond within 30 days.
To exercise any of these rights, contact us at: ady@themailstack.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We will update this policy if our data practices change. The "Last updated" date at the top of this page reflects the date of the most recent revision.