Privacy and cookies.

Who I am

This is the personal website of Jonathan Sabarre. I'm responsible for the personal data described here. You can reach me at jonathan@jonathansabarre.com about anything on this page.

The weekly email

If you subscribe, I keep your name, email address, optional role and institution, the topics you chose, and a record of your consent: when you signed up, the wording you agreed to, and the IP address and browser used. You're subscribed as soon as you sign up, and your first email is a welcome.

I use this to send the weekly email, which is the only reason I ask for it. The legal basis is your consent, and you can withdraw it at any time with the unsubscribe link in every email or on the email preferences page.

To understand what's useful, the emails record when they're opened (a tiny image) and which links are clicked. Links to this website include a short identifier so that, if you've accepted analytics here, the articles you read on the site can shape what I send you, for example by recommending pieces on the topics you read most.

The email system is my own, built on Netlify (hosting), Supabase (database, hosted in Stockholm, Sweden) and Amazon Web Services (email delivery, Stockholm, Sweden). Sign-up forms are also received by Netlify. I never sell or share your details.

Tailoring the email. I also keep your region and country, and I work out your likely time zone and language from them, or from your browser when you sign up. I use these to send the email at a sensible hour where you are and in English or Spanish. You can ask me to change them at any time.

Referrals. If you share your personal subscribe link, I keep a record that a new subscriber came through it, and a count of how many people did. I don't tell anyone else who referred them.

Analytics, only if you accept

There are two layers, and you control both with Cookie settings.

Anonymous statistics (on unless you object). To see which pages and episodes are useful and improve the site, the site counts page views, article reads, plays and clicks. These counts carry no identifier: nothing is stored on your device for them, and I only keep totals per day, page and traffic source (for example "12 views of this article from LinkedIn"), never a record about you. UK law allows this without consent as long as you can object, which you can do at any time in Cookie settings. A Global Privacy Control signal from your browser also switches it off.

Personalisation and Google Analytics (only if you say yes). Off unless you agree, either on the banner, at the end of an article, or by ticking "Tailor my emails" when you subscribe. If you say yes:

• Google Analytics 4 (Google Ireland Limited) measures which pages, episodes and articles are used, where visitors come from, and which buttons and forms are used. It sets cookies named _ga and _ga_W3HPCRZ5B8, which last up to two years. Advertising features and Google signals are switched off, and GA4 doesn't store IP addresses. I keep this data for 14 months.
• First-party analytics sends the same kind of events (pages viewed, articles read, podcast plays and how far you listened, buttons clicked) to my email system. It stores a random visitor number and your choices in your browser's local storage (mr_vid, mr_consent, and mr_stats_off if you object to statistics). If you subscribe, or arrive from one of my emails, your visits are linked to your subscription. These events are deleted after 14 months.

You can change your mind at any time with Cookie settings, also in the footer of every page. Switching personalisation off removes the analytics cookies and the stored visitor number from your browser. If you say no, I'll ask again after six months at most; if you say yes, after thirteen months.

Other services this site uses

• Speaking enquiries are received through Netlify Forms and recorded in my contact system as an enquiry. I use them only to reply to you. An enquiry does not subscribe you to anything unless you tick the box to get the weekly email.
• YouTube. Episode thumbnails come from YouTube's image servers. A video only loads, through YouTube's privacy-enhanced mode, when you press play, at which point Google's own terms and cookies apply.
• Talk to Jonathan (AI). The voice call button connects you to an AI version of me that speaks in my cloned voice, with my permission. Your voice is processed live to transcribe and answer you (by LiveKit, ElevenLabs and Anthropic). No audio is recorded. Unless you untick the box before the call, the transcript is kept for 90 days so I can review the quality of answers, then deleted. If you agree on the call to share your name and email for a follow-up, I store them in my contact system and use them only for that follow-up. Calls are limited to five minutes, and a hashed, daily-changing form of your IP address is used to limit how many calls one connection can make.
• Google Fonts. The site's fonts load from Google's servers, which receive your IP address to deliver them.

Some of these providers are based in the United States. Where data leaves the UK, it's covered by the safeguards UK law approves for international transfers.

Your rights

You can ask for a copy of the data I hold about you, ask me to correct or delete it, or object to how it's used. Email jonathan@jonathansabarre.com and I'll respond within a month. If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.