Privacy Policy

Last updated: July 2026

Expat Daily and Valencia Expat Daily ("we", "us", "our") are a newsletter and web application operated by Milan Krstic from Valencia, Spain, who is the data controller for the personal data described in this policy. This policy covers valenciaexpatdaily.com and expat-daily.com, including their city sites and the app subdomains. It explains what data we collect, how we use it, and your rights.

1. What Data We Collect

We keep data collection to a minimum. Here is what we store:

• Email address - provided when you sign up. This is the primary way we identify your account and deliver the newsletter.
• Usage analytics - basic data about how you interact with the site and app (pages visited, features used), collected and stored on our own servers. We use this solely to improve the service. See section 6.
• Technical data - your IP address and browser type, recorded when you visit or interact with the service. We use these only for security, abuse prevention, and understanding aggregate usage. Stored IP addresses are automatically deleted after 30 days; we do not keep them long-term.
• Payment information - if you subscribe to a paid plan, payment is processed entirely by Stripe. See section 4 below.

2. Authentication

We use passwordless "magic link" authentication. When you sign up or log in, we send a one-time link to your email. You click it and you are logged in. We do not store passwords because there are none to store. Magic links expire after a short time for security.

3. Cookies

We use a single httpOnly JWT session cookie to keep you logged in. This cookie is strictly functional - it cannot be read by JavaScript and is only used to authenticate your session.

We do not use tracking cookies, third-party advertising cookies, or any other non-essential cookies. We do not use Google Analytics or any other third-party analytics service.

4. Payment Processing

All payment processing is handled by Stripe. When you subscribe to a paid plan, your card details are entered directly into Stripe's secure payment form. We never see, receive, or store your card number or payment details. We only receive confirmation from Stripe that a payment was successful, along with a subscription identifier.

5. Email Delivery

Our daily newsletter emails are sent through Amazon Simple Email Service (SES). Amazon SES processes your email address solely for the purpose of delivering our emails to you. We do not share your email with any other third party for marketing purposes.

6. Analytics

We run our own, self-hosted analytics to understand how the service is used and to improve it. This includes general information like which pages are visited and which features are popular. This data is collected and stored entirely on our own servers - it never leaves our infrastructure, and we do not use any third-party analytics service. We do not sell or share analytics data with anyone.

Like virtually every website, our web servers also keep standard access logs (containing IP addresses) for security and troubleshooting. These logs are rotated and deleted automatically within 14 days.

7. Data Retention and Deletion

• You can unsubscribe from the newsletter at any time using the link at the bottom of every email, or by switching to app-only mode in your settings.
• You can request complete deletion of your account and all associated data by emailing us at contact@valenciaexpatdaily.com. We will process deletion requests promptly.
• If you delete your account, we remove your email address, settings, and any associated records from our database.
• Stored IP addresses are automatically deleted after 30 days; server access logs are deleted within 14 days.

8. Data Sharing

We do not sell your data. We only share data with the following service providers, strictly for operating the service:

• Stripe - payment processing
• Amazon SES - email delivery

9. Your Rights

You have the right to access, correct, or delete your personal data at any time. If you are located in the European Union, you also have rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

10. Contact

If you have any questions about this privacy policy or your data, please contact us:

contact@valenciaexpatdaily.com

Data controller: Milan Krstic
Expat Daily / Valencia Expat Daily
Valencia, Spain