Privacy Policy

Last updated: 12 April 2026

Prototype to Product is a personal newsletter run by Valerio Milana. This policy explains what data is collected, why, and how you can control it.

What data is collected

If you subscribe

When you subscribe, the following is stored in a secure database:

  • Your email address
  • The date you confirmed your subscription
  • A unique unsubscribe token (used to let you unsubscribe in one click)

No name, no payment information, no browsing history. Your email is used solely to send you newsletter posts and is never shared with third parties.

If you use the contact form

When you send a message via the contact form, the following is stored:

  • Your name
  • Your email address
  • Your message
  • The date you sent it

This data is used solely to respond to your enquiry. Your email address is not added to the newsletter list unless you subscribe separately.

Analytics

When you visit this site, the server records the page path, referrer, country (derived from the request by the hosting provider), and browser type. No IP addresses are stored and no cookies are set for this purpose. This data is used to understand which pages are visited and is never shared with third parties.

Rate limiting

When you submit the subscribe form, a one-way hash of your IP address is temporarily stored to prevent abuse. This hash cannot be reversed to identify you and is automatically deleted after a short window.

Legal basis (UK GDPR)

The legal basis for processing your email address is consent. You actively subscribe via double opt-in (you enter your email, then click a confirmation link). You can withdraw consent at any time by unsubscribing.

The legal basis for analytics is legitimate interest in understanding which content is useful, balanced against minimal privacy impact (no personal data is collected).

Where data is stored

Subscriber data is stored in a PostgreSQL database hosted by Neon in the EU (AWS eu-west-2, London). Emails are sent via Resend. The site is hosted on Vercel.

Your rights

Under UK GDPR, you have the right to:

Cookies

This site uses a single cookie to remember your light/dark theme preference. It contains no personal data and is not used for tracking.

Third-party services

The only third-party services that receive data are listed above: Vercel (hosting), Neon (database), and Resend (email delivery). No data is sold or shared with advertisers.

Changes to this policy

If this policy changes, the updated version will be published here with a new date. For material changes, subscribers will be notified by email.

Contact

For any privacy-related questions or requests, email hello@prototypetoproduct.com.

← Back to home