Privacy policy
In short
Minusumin is a news site. Reading it requires no account, and we do not
sell, share, or trade reader data. The personal data we handle is
minimal: server logs (short-lived, for security and diagnostics),
anything you send us yourself by email (such as a correction or a tip),
and — only with your consent — anonymised usage statistics via web
analytics. By default no trackers or advertising pixels load on the
site.
Data controller
OÜ CONFIRMO (publication "Minusumin")
Registry code: 10884796
Address: Oravakese, Raanitsa küla, 62020 Kambja vald, Tartu maakond, Estonia
To get in touch, including for privacy matters, see the
contact page.
What data we handle
Server logs (necessary). Like any web server, our hosting partner
records, for each request, the IP address, the browser (user-agent)
string, the requested path, the response code, and a timestamp. Logs
are used only for operational diagnostics and abuse prevention.
Retention is short (typically up to 30 days) and they are not used for
marketing.
Email correspondence. When you write to us — usually about a
correction, a tip, a licensing request, or a privacy question — we
keep the email and its contents so we can reply and handle the matter.
We do not add your address to any mailing list and do not share it with
third parties.
Search. The site search passes your query in the URL (for example
/?q=…). Search terms may appear briefly in server logs; we do not link
them to your identity or use them for profiling.
Web analytics (consent only). If you give consent, we use Google
Analytics (GA4) to collect anonymised, aggregated statistics about how
the site is used (pages viewed, session duration, approximate
country-level location). Analytics does not start until you consent —
see "Analytics and consent" below.
Legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Server logs, security, abuse prevention | Legitimate interest, Art. 6(1)(f) |
| Replying to emails | Legitimate interest, Art. 6(1)(f) |
| Strictly necessary cookies (e.g. language preference) | Legitimate interest / necessary to provide the service |
| Web analytics (GA4) | Consent, Art. 6(1)(a) |
What we do not collect
We require no registration, login, or comments, and we have no
newsletter. The site loads no trackers, advertising pixels, or social
network embeds by default. Articles include share buttons (Facebook, X,
LinkedIn, WhatsApp, Telegram) that open the target service only when you
click them — they transmit nothing until you do.
Analytics and consent
The site uses Google Analytics (GA4) together with Google Consent Mode
v2. By default, analytics and advertising cookies are denied — that
is, before your consent GA4 sets no cookies and collects no data
attributable to you. If you accept on the cookie banner, analytics turns
on. Consent is voluntary and can be withdrawn at any time (see
"Cookies").
Statistics are aggregated and anonymised; we do not use them to identify
an individual reader. Data collected by GA4 is retained per Google's
settings (typically up to 14 months).
Cookies
By default the site sets no tracking cookies on first visit.
- Strictly necessary cookies — may be set for the site to function
(for example, to remember your language preference or your cookie
consent choice). These do not require consent. - Analytics cookies (GA4) — set only after your consent. Typical
ones are_gaand_ga_…(valid up to 2 years), which Google
Analytics uses to distinguish visitors and sessions.
You can manage cookies in your browser settings and withdraw your
analytics consent at any time via the cookie banner. Blocking necessary
cookies may affect how the site works.
Third-party services
To deliver content, the site uses a few external services. When these
load resources, your IP address may reach the relevant provider:
| Service | What it sees | Purpose |
|---|---|---|
Google Fonts (fonts.googleapis.com, fonts.gstatic.com) |
IP address | Loading typefaces |
Google Tag Manager (googletagmanager.com) |
— | Loading GA4 after consent |
Cloudflare CDN (cdnjs.cloudflare.com) |
IP address | Loading icons (Font Awesome) |
jsDelivr (cdn.jsdelivr.net) |
IP address | Loading flag icons |
YouTube (privacy mode, youtube-nocookie.com) |
IP address (only when a video loads) | Embedded video in some articles |
Each provider's own privacy policy applies to the traffic it processes.
Hosting and infrastructure
The site is hosted on Fly.io, and the English domain (minusumin.com)
sits behind Cloudflare (as a CDN / edge layer). Images are served from
Cloudflare R2 storage. These providers process traffic data to deliver
content (routing, caching, DDoS protection); their own privacy policies
apply to that traffic.
International transfers
Some of the services above (Google services, Cloudflare) may process
data outside the European Union / European Economic Area, including in
the United States. Where this happens, the transfer relies on safeguards
approved by the European Commission (the EU–US Data Privacy Framework
and/or the European Commission's standard contractual clauses).
Data retention
- Server logs — typically up to 30 days.
- Email correspondence — for as long as needed to handle the matter
and any follow-up, then deleted. - Analytics (GA4) — per Google's settings (typically up to 14
months).
Your rights
As an EU / EEA resident you have the following rights under the GDPR
regarding the personal data we hold:
- the right of access (Art. 15);
- the right to rectification (Art. 16);
- the right to erasure (Art. 17);
- the right to restriction of processing (Art. 18);
- the right to data portability (Art. 20);
- the right to object (Art. 21);
- the right to withdraw consent at any time (Art. 7(3)).
To exercise your rights, contact us via the contact page.
Lodging a complaint
If you believe your data is being processed unlawfully, you have the
right to contact the supervisory authority. Minusumin is published from
Estonia, where the authority is:
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI)
Tatari 39, 10134 Tallinn, Estonia
Email: [email protected]
Phone: +372 627 4135
Website: www.aki.ee
You may also contact the data protection authority in your own EU/EEA
country of residence.
Changes to this policy
If we materially change how we handle data, we will update this page and
note the date of the change. Last updated: 2026-05-22.
Contact
For privacy matters, see the contact page.