Privacy policy

Last updated: August 1, 2026

Who this policy is about

This policy covers subscribers — people who gave us an email address for the Six Brief daily brief — and creators whose public posts we link to, who never gave us anything and are covered by the Art. 14 notice below.

Controller: Przemysław Puzoń, Przejazd 2/35, 02-654 Warszawa, Poland (NIP 5472086477) — privacy@sixbrief.com. You may lodge a complaint with the Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl).

What we collect

From subscribers we collect the email address you give us. A successful site signup is also labelled site-signup in our email system so we can distinguish it from other lawful signup routes. We do not collect names or payment details, and we do not run third-party advertising trackers on this site.

To prevent automated subscription abuse, Cloudflare Turnstile evaluates a signup and gives our server a single-use verification token. We send that token and the connecting IP address to Cloudflare for verification. Separately, our server stores keyed, pseudonymous hashes of the submitted email address and connecting IP with coarse attempt counters for no more than 48 hours. The raw IP address is not stored in those counters; the hashes are used only for signup abuse prevention and are never joined to newsletter or analytics data. We process these short-lived security signals under our legitimate interest in protecting subscribers and our service from abuse (GDPR Art. 6(1)(f)).

Site analytics

This site uses a self-hosted, cookieless analytics instance (umami) served from our own domain. It stores no cookies and no identifiers on your device, strips search and campaign parameters from the URLs it records, reports only in aggregate, does not track you across other sites, and shares nothing with third parties. It is never cross-referenced with the subscriber list. You can additionally switch it off for your browser:

Disable analytics in this browser

The toggle stores a single "umami.disabled" flag in your browser's local storage — storage you asked for, used for nothing else.

Email click measurement and ad conversion events

Newsletter emails do not track opens. Under the bundled consent shown at signup, we measure which links in an issue are clicked, to decide which sections earn their place. If you arrived via one of our ads, we may also send a server-side conversion event to the ad platform containing only a hashed form of your email address — never a browser pixel, never cookies. You can withdraw this measurement consent at any time without losing the newsletter: reply to any issue with the words "STOP TRACKING", and we will label your subscription analytics-opt-out; clicks and conversion events for your address stop being processed.

Creators we link to (GDPR Art. 14)

Six Brief links to public posts by named GTA creators. If you are one of them, you never gave us anything and this section is your notice.

What we hold: your public handle and display name, the platform, the title and URL of a public post, its publication time, the web address of the post's thumbnail image, and sometimes a short attributed quote from it. Nothing else. No contact details, no follower or viewer counts, no rankings, and no copy of your video, thumbnail or artwork — where a thumbnail appears on our pages or in our email, your reader's browser loads it directly from the platform's own servers.

Where it came from: the public APIs of YouTube, Twitch and X — not from you, which is why this notice exists.

Why: our legitimate interest in reporting on the Grand Theft Auto franchise, under Art. 6(1)(f). We publish only what you already published, and always link back to it.

How long: 30 days, then it is deleted automatically — YouTube's Developer Policies require it and we apply the same clock to every platform rather than keeping two rules.

To object: /opt-out. No account, no email address, no questions. We aim to act within one hour and always within 72 hours, and the suppression is permanent — it survives every later change to who we follow.

Reader feedback

If you use the feedback form, a poll link, or reply to an issue, we store your message. Email addresses and phone numbers inside message bodies are redacted at ingest, message bodies and any contact details are deleted after 90 days, and anonymous poll votes are kept only as counts. Feedback may be summarized with the help of an AI processor (Anthropic) under a data processing agreement; messages identified as data-protection requests are excluded from that processing and handled by a human.

How we use your email address

Your email address is used solely to deliver the list you asked for — the Six Brief newsletter and its occasional major-news blasts — and to process your unsubscribe request. We do not sell, rent, or share your email address with third parties for their own marketing.

Service providers

The newsletter is delivered through an email service provider that stores subscriber addresses and standard delivery metadata (such as whether an email was opened) on our behalf, under its own security and privacy obligations. Aggregate delivery statistics help us understand whether the newsletter is working; they are not used to build individual profiles.

Affiliate links

The stock page contains affiliate links to retailers. If you click one, the retailer and the affiliate network may set cookies on their own sites under their own privacy policies. We receive only aggregate commission reporting, never your identity.

Data retention and deletion

We keep your email address for as long as you remain subscribed. When you unsubscribe, your address is removed from the active mailing list; you may additionally request full deletion of your address from our systems at any time by replying to any issue of the newsletter, and we will complete the deletion within 30 days.

Your rights

You may unsubscribe at any time using the link in every email. You may request a copy of the data we hold about you (your email address and subscription date) or its deletion by contacting us at the address in any newsletter issue. Access, erasure, and objection requests can be made through any channel — reply to any issue, use the feedback form, or email the reply address shown in every newsletter footer. Such requests are flagged to a human immediately and answered within one month, as the law requires.

Children

This newsletter is not directed at children under 16, and we do not knowingly collect their email addresses. If you believe a child has subscribed, contact us and we will remove the address.

Changes to this policy

If we change this policy, the updated version will be posted on this page with a new "last updated" date. Material changes will be announced in the newsletter itself.