Privacy notice
Last updated: November 14, 2026
This notice explains what personal data is processed when you visit this site, sign up for the newsletter or write to me, and what rights you have. The site is deliberately simple: it sets no cookies, uses no analytics and loads nothing from third parties into your browser.
1. Who is responsible
Martin Deerberg, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany. Email: hello@blairkittredge.com.
Blair Kittredge is a pen name; the person responsible under data protection law (the “controller”) is Martin Deerberg.
2. Visiting this site
This site is delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”), which hosts it on my behalf. When your browser requests a page, Cloudflare necessarily processes your IP address, the date and time of the request, the page requested and the technical details your browser sends (browser type, operating system, referring page). Cloudflare uses this data to deliver the page and to protect the site against attacks, and keeps it in log files for a short time.
I do not combine this data with anything else and cannot identify you from it.
- Purpose: delivering the site securely and reliably.
- Legal basis: Art. 6 (1) (f) GDPR; my legitimate interest is a working and secure website.
- Processor: Cloudflare processes the data under a data processing agreement. Data may be processed in the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework, and the EU standard contractual clauses apply in addition.
This site sets no cookies and stores nothing on your device. There are no analytics tools, no advertising tools, no social-media buttons and no fonts, videos or maps loaded from other providers.
3. The newsletter
If you sign up, I use your email address to send you emails about new books under the name Blair Kittredge and about the What We Sold series. I expect to write a few times a year.
Double opt-in. After you submit the form you receive one email asking you to confirm. Only when you click the link in it are you on the list. If you do not confirm, your address is deleted after 30 days at the latest.
What is stored. Your email address; the date and time of your sign-up and of your confirmation; the IP address from which each was made; and the wording you agreed to. The last four are kept so that I can prove your consent.
Provider. The newsletter is sent through EmailOctopus, a service of Three Hearts Digital Ltd, 86-90 Paul Street, London EC2A 4NE, United Kingdom, which processes the data on my behalf under a data processing agreement. According to EmailOctopus the data is stored on servers in Ireland. The European Commission has decided that the United Kingdom provides an adequate level of data protection. The sign-up form on this site is sent to this site itself and passed on to EmailOctopus from there; no EmailOctopus script runs in your browser.
No tracking in the emails. I have switched off the measurement of opens and clicks. The emails contain no tracking pixels.
- Purpose: sending the newsletter you asked for; proving that you asked for it.
- Legal basis: your consent, Art. 6 (1) (a) GDPR and § 7 (2) no. 2 of the German Act against Unfair Competition (UWG). For the record of your consent: Art. 6 (1) (f) GDPR together with Art. 7 (1) GDPR; my legitimate interest is being able to prove consent.
- Withdrawing consent: You can unsubscribe at any time, with effect for the future, through the link at the foot of every email or by writing to hello@blairkittredge.com. It costs nothing and needs no reason.
- How long data is kept: Your address is used until you unsubscribe and is then no longer mailed. The record of your consent and of your unsubscribing is kept for three years from the end of the year in which you unsubscribed, solely to defend against legal claims, and is then deleted.
You do not have to give your email address to use this site. Without it you simply receive no newsletter.
4. Writing to me
If you write to hello@blairkittredge.com, I process your email address and whatever you tell me in order to answer you. The mailbox is provided by Migadu-Mail GmbH, Rohnen 587, 9414 Schachen, Switzerland, which stores the messages on my behalf. The European Commission has decided that Switzerland provides an adequate level of data protection.
- Legal basis: Art. 6 (1) (f) GDPR; my legitimate interest is answering the people who write to me.
- How long data is kept: Your message is deleted once the matter is settled, at the latest two years after the last message, unless the law requires me to keep it longer.
5. Who receives your data
Only the service providers named above (Cloudflare, EmailOctopus, the mailbox provider), each for the purpose described and bound by contract. I do not sell or rent personal data and I do not pass it on for advertising.
6. Your rights
Under the GDPR you have the right to:
- be told what data about you I hold, and receive a copy (Art. 15);
- have incorrect data corrected (Art. 16);
- have your data deleted (Art. 17);
- have its processing restricted (Art. 18);
- receive the data you gave me in a common machine-readable format (Art. 20);
- object, on grounds relating to your particular situation, to processing that rests on my legitimate interest (Art. 21);
- withdraw a consent you have given, at any time, with effect for the future (Art. 7 (3)).
To use any of these rights, write to hello@blairkittredge.com.
You also have the right to complain to a data protection supervisory authority, in particular in the EU member state where you live or work, or where you believe the infringement took place (Art. 77).
7. No automated decisions
Your data is not used for automated decision-making or profiling.
8. Readers under 16
This site and the newsletter are meant for adult readers. Please do not sign up if you are under 16.
9. Changes to this notice
If the site or the services it uses change, this notice changes with them. The date at the top shows the current version.