Privacy Notice
What this site collects, why, who helps us run it, and the choices you have. In plain terms.
01—Who we are
Who we are
FTSeffect.com is the website for Flooding the Space by J.W. Bouckaert. It is operated on the author's behalf by PasskeyBridge LLC, a Wyoming limited liability company at 5830 E 2nd St., Ste 7000 #33652, Casper, WY 82609, USA. PasskeyBridge LLC is the controller of the personal information described here.
For anything about this notice or your information, email mgmt@ftseffect.com.
02—What we collect and why
What we collect and why
The site has no accounts and no logins. Personal information reaches us in these ways only.
Newsletter sign-up
If you tick the opt-in box in the Contact section and enter your email address, we store that address, the date you signed up, where you signed up (the Contact section) and whether you are subscribed. We use it only to send occasional milestone updates about the book, such as publication day, errata and lectures. We don't sell or rent your address, and we don't use it for anything else.
To stop automated abuse, each sign-up attempt also creates a short-lived rate-limit record. It holds only one-way (SHA-256) hashes of your email address and of the network address that contacted our database (our hosting provider's, because the form is submitted through our server), plus a timestamp. Our server checks that your request carries an IP address, but does not pass it to the database or store it with your sign-up.
Contact form and email
The contact form doesn't send anything to our servers. When you press send, it opens your own email app with a pre-filled message to mgmt@ftseffect.com, containing the name, email address, organisation, topic and message you typed. Nothing leaves your device unless you send that email. If you do, we receive it like any other email and use it to reply to you.
Visiting the site
Like any website, our hosting provider receives the technical information your browser sends with each request, such as your IP address, browser and device type, the page requested, the referring page and the time. It is used to deliver the site and keep it secure and reliable.
Analytics
We use two cookieless analytics tools to see how many people visit and which pages they read.
- Vercel Web Analytics records page views with the page address, referrer, filtered query parameters, approximate location (country, region, city), operating system, browser and device type. Vercel identifies visitors by a hash created from the incoming request rather than a cookie, and discards it after 24 hours. Reports are aggregated.
- Ahrefs Web Analytics records page views, referrers and browser and device information, and derives an approximate location no finer than city level from your IP address. Ahrefs states that raw IP addresses are discarded and never stored; unique visitors are counted with a hash of the IP address and browser details salted with a value that is replaced every 24 hours.
Neither tool sets cookies or tracks you across other websites.
Error monitoring
If a page or our server hits an error, an error report goes to Sentry: the error message and stack trace, browser and operating system, the page address without its query string, and the site version. It is configured not to collect names, email addresses, IP addresses, cookies, request bodies or headers that could identify you, and email- and token-shaped text is removed before anything is sent. Nothing is sent when there is no error, and there is no session recording.
Links to other sites
Pre-order links go to the retailers' own sites (Amazon, Barnes & Noble, Apple Books, Bookshop.org, Target and Walmart), and other links go to sites such as X. We don't embed their content, so they receive nothing from us until you click. Once you are on their sites, their privacy policies apply.
03—Legal bases
Legal bases
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases under the GDPR and UK GDPR:
- Consent for the newsletter. You can withdraw it at any time by emailing mgmt@ftseffect.com; withdrawal doesn't affect anything we did before.
- Legitimate interests for replying to emails you send us, serving and securing the site, preventing sign-up abuse, aggregate analytics and fixing errors. You can object to processing based on legitimate interests (see Your rights).
04—Service providers
Service providers
These companies process personal information for us as service providers (processors). Data Privacy Framework status was checked directly on dataprivacyframework.gov on October 8, 2026.
Vercel
Vercel Inc., Covina, California, USA
- Purpose
- Hosting, content delivery, the newsletter sign-up function, and Vercel Web Analytics.
- Transfer safeguard
- EU-U.S. Data Privacy Framework, UK Extension and Swiss-U.S. Data Privacy Framework (active) · listing
Supabase
Supabase Pte. Ltd., Singapore; database hosted in the USA (us-east-1)
- Purpose
- Stores newsletter sign-ups and the hashed rate-limit records.
- Transfer safeguard
- Not listed on the Data Privacy Framework. Supabase's data processing addendum incorporates the European Commission's standard contractual clauses.
Ahrefs
Ahrefs Pte. Ltd., Singapore
- Purpose
- Ahrefs Web Analytics: cookieless, aggregate traffic statistics.
- Transfer safeguard
- Not listed on the Data Privacy Framework. Processing is governed by Ahrefs' data processing addendum.
Sentry
Functional Software, Inc. (Sentry), San Francisco, California, USA; data processed in Sentry's US region
- Purpose
- Error monitoring: reports when a page or the server hits an error.
- Transfer safeguard
- EU-U.S. Data Privacy Framework, UK Extension and Swiss-U.S. Data Privacy Framework (active) · listing
Proton
Proton AG, Geneva, Switzerland
- Purpose
- Email hosting for mgmt@ftseffect.com.
- Transfer safeguard
- Switzerland is recognised by the European Commission and the UK as providing an adequate level of data protection.
05—International transfers
International transfers
PasskeyBridge LLC is based in the United States, and the providers above process information in the United States, Singapore and Switzerland. If you are in the EEA, the UK or Switzerland, your information is transferred to those countries. For Vercel and Sentry we rely on their certification under the Data Privacy Framework (including the UK Extension and the Swiss-U.S. framework). Supabase and Ahrefs are not certified; Supabase's data processing addendum incorporates the European Commission's standard contractual clauses, and Ahrefs processes data under its data processing addendum. Switzerland, where Proton is based, benefits from adequacy decisions of the European Commission and the UK.
06—How long we keep it
How long we keep it
- Newsletter sign-ups: for as long as you stay subscribed and we send updates about the book, then deleted. If you unsubscribe, we keep your address marked as unsubscribed only so we don't write to you again; ask us to erase it and we will delete it.
- Rate-limit records: only as long as needed to detect abuse. Records older than two days are cleared automatically when later sign-ups are processed.
- Emails you send us: for as long as needed to deal with your enquiry and any follow-up, then deleted.
- Analytics, request logs and error reports: kept by Vercel, Ahrefs and Sentry for as long as needed to provide those services, under their own retention settings, then deleted.
07—Your rights
Your rights
Under the GDPR and UK GDPR you have the right to access the personal information we hold about you, to have it corrected, to have it erased, to object to processing based on legitimate interests, to restrict processing, to receive your data in a portable form, and to withdraw consent at any time.
To use any of these rights, email mgmt@ftseffect.com. We may need to confirm that the request comes from you (for example, by replying from the address you signed up with). We will answer within one month.
You also have the right to complain to a supervisory authority: in the EEA, the data protection authority in your country; in the UK, the Information Commissioner's Office.
08—California and U.S. state privacy rights
California and U.S. state privacy rights
We do not sell or share your personal information, as those terms are defined in the California Consumer Privacy Act, and we do not use it for targeted advertising. Depending on where you live, you may have the right to know what personal information we hold about you, and to ask us to correct or delete it. Email mgmt@ftseffect.com to make a request. We will not treat you differently for doing so.
10—Children
Children
This site is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has signed up for the newsletter, email mgmt@ftseffect.com and we will delete the address.
11—Changes to this notice
Changes to this notice
If how we handle personal information changes, we will update this page and the effective date at the top.
12—Contact
Contact
PasskeyBridge LLC, 5830 E 2nd St., Ste 7000 #33652, Casper, WY 82609, USA.
Email: mgmt@ftseffect.com