Last updated October 20, 2026
Privacy policy
The stories get complicated. Your privacy shouldn’t.
Who handles your information?
Maud Salvatore, writing as Maddie D., decides how personal information is used to respond to readers and send her journal. For privacy questions or requests, email [email protected].
When you email me
Your email address, any name you provide, and your message are used to respond to your request. For general inquiries, the legal basis is the legitimate interest in responding to people who contact the author. A reply address is needed to get back to you; other information depends on your request. Please avoid including sensitive information that isn’t needed.
The contact mailbox is hosted by iCloud Mail (Apple). The author and the technical providers responsible for delivering and storing email can access these exchanges as needed. Sending an email does not automatically subscribe you to the journal. Routine correspondence is kept for two years after the last exchange. An annual review identifies messages due for deletion and those approaching that deadline so the retention period can be respected. Records needed to fulfill a contract, meet a legal obligation, or handle a dispute are retained separately, only for the relevant purposes and periods.
When you subscribe
You sign up for Maddie’s Ink, Love & Embers — The Journal through Substack. Your email address is required to send you posts by email. Any additional profile information depends on the Substack features you choose to use.
The journal is sent with your consent. You can withdraw that consent using the unsubscribe link in the emails. This stops future mailings and does not affect the lawfulness of earlier processing.
The author has access to the subscription information needed to manage the journal. Substack provides the technical service and also processes information for its own platform features, as described in its privacy policy. Details of retention periods, analytics settings, and international transfers for the journal still need to be specified.
Browsing and third-party content
Serving and protecting the website involves processing connection data, including your IP address and technical request information. Cloudflare provides the hosting infrastructure.
The Substack form loads only after you click the button to open it. Once it loads, your browser communicates with Substack. You can also use the direct signup link. Social media and retailer links take you to services with their own privacy policies.
Your rights
Depending on the processing and the conditions set out in the GDPR, you can request access to, correction of, deletion of, or restrictions on the use of your information. You may also have the right to object and the right to data portability. Where processing relies on consent, you can withdraw it at any time.
Send requests to [email protected]. Proportionate identity checks may be needed if there is reasonable doubt about your identity. You can also lodge a complaint with the French data protection authority, the CNIL.