Privacy policy
Last updated: October 1, 2026
This policy explains how ThosePosts Ltd handles your personal data when you visit thoseposts.com and when you request early access. It is written to meet the EU General Data Protection Regulation (GDPR) and the UK GDPR.
The ThosePosts app has its own privacy policy, which you will see when you create an account.
1. Who we are
The website is operated by ThosePosts Ltd, a company registered in Mauritius, based in Tamarin, Mauritius ("ThosePosts", "we", "us"). We are the controller of the personal data described in this policy.
Privacy contact: team@thoseposts.com
2. What we collect
When you browse the website
- Technical data your browser sends automatically: IP address, browser and device type, the pages you request, and the date and time. Our web server keeps these logs for security and to fix errors.
- Analytics data, only if you accept analytics cookies: pages viewed, time spent, how you arrived on the site, approximate location (country or city) and device type. This is collected by Google Analytics. See section 5.
When you request early access
- Your name, email address and country.
- Your phone number, only if you choose to give it.
- The date of your request and how you found us, if you tell us.
We do not ask for any sensitive data, and please do not send us any.
Optional product news
If you select Send me product news, we record your choice and its date in our CRM and use your email to send ThosePosts product updates. This is optional and separate from your early-access request. You can withdraw this choice by emailing team@thoseposts.com.
When you email us
Your email address, your message and our replies.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR art. 6) |
|---|---|---|
| Handle your early-access request: confirm it, contact you when a place opens, set up your account | Name, email, country, phone if given | Steps taken at your request before a possible contract (6.1.b) |
| Call you about your request, only if you gave a phone number | Phone | Same as above (6.1.b) |
| Send you updates about the launch and your access | Our legitimate interest in following up on your request (6.1.f). Every email has an unsubscribe link. | |
| Send optional product news when you select the checkbox | Email and your recorded choice | Your consent (6.1.a) |
| Measure and improve the website | Analytics data | Your consent (6.1.a) |
| Keep the website secure and working | Technical data | Our legitimate interest in running a safe website (6.1.f) |
| Answer your emails | Email, message | Our legitimate interest in answering you (6.1.f) |
We do not sell your data, we do not use it for advertising, and we do not add you to a general marketing newsletter unless you ask us to.
4. Where your data is stored and who can see it
Only ThosePosts staff who need it can see your data. We use these service providers:
| Provider | What they do | Where |
|---|---|---|
| Hostinger | Hosts the website and the server where our CRM runs | Indonesia (Jakarta) |
| Twenty (CRM), self-hosted on our server | Stores your early-access request | Indonesia (Jakarta) |
| Google (Google Analytics) | Website statistics, only with your consent | USA and other countries |
| Titan | Our email | EU |
| Resend | Sends automatic emails, such as the confirmation of your request | EU |
International transfers
ThosePosts Ltd is based in Mauritius and our server is in Indonesia. Neither country has an EU adequacy decision, so when you are in the EU or the UK, your data is sent outside the European Economic Area.
We protect it with contracts that require our providers to keep it secure and confidential, with encryption in transit (HTTPS), and with restricted access. Google Analytics data is transferred to the USA under the EU–US Data Privacy Framework, for which Google is certified, and Google's Standard Contractual Clauses. You can ask us for details of these safeguards.
5. Cookies
We set non-essential cookies only after you agree. When you first visit, our cookie banner lets you accept or refuse analytics cookies. Both choices are equally easy. You can change your mind any time with the Cookie settings link in the website footer.
We use Google Consent Mode. If you refuse, Google Analytics sets no cookies. We do not load the Google Analytics tag until you accept, so rejecting analytics prevents analytics collection through this tag.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
thoseposts-cookie-consent-v1 | Remembers your cookie choice in browser local storage (not a cookie) | Preference storage | 180 days |
_ga | Google Analytics: tells visitors apart | Analytics, with consent | 13 months |
_ga_[ID] | Google Analytics: keeps track of your session | Analytics, with consent | 13 months |
You can also block or delete cookies in your browser settings.
6. How long we keep your data
| Data | How long |
|---|---|
| Early-access request | Until you become a customer (then the app's privacy policy applies), or 12 months after our last exchange if you don't. You can ask us to delete it earlier. |
| Emails with us | 2 years after our last exchange. |
| Web server logs | 30 days. |
| Google Analytics data | 14 months. |
| Your cookie choice | 180 days, after which we ask again. |
7. Your rights
You can:
- access your data and get a copy;
- correct it if it is wrong;
- delete it;
- object to how we use it, or ask us to restrict it, including at any time for updates based on our legitimate interest;
- receive it in a portable format;
- withdraw your consent to analytics cookies at any time, through Cookie settings.
To use any of these rights, email team@thoseposts.com. We answer within one month. We may ask you to confirm your identity.
You can also complain to a data protection authority, in particular the one in the EU country where you live or work. You can find yours at edpb.europa.eu. In Mauritius, the authority is the Data Protection Office.
8. Security
The website uses HTTPS. Access to our server and CRM is restricted and protected by strong authentication. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
9. Children
The website and ThosePosts are for businesses. They are not meant for anyone under 18, and we do not knowingly collect data about children.
10. Changes to this policy
We may update this policy. The date at the top shows the latest version. If we make important changes that affect people on the early-access list, we will email them.
11. Contact
ThosePosts Ltd, Tamarin, Mauritius. Email: team@thoseposts.com