We keep this short and honest: we collect your email so we can send you prompts, and anonymous traffic data so we can make the site better. We never sell your data. Here are the details.
Who we are
Boss of Prompts ("we", "our", "us") is run by Maurice Greenland. For data-protection purposes, the data controller is Maurice Greenland, Largo Coronel Vasconcelos Dias, Lisboa, Portugal. If you have any questions about this policy, contact us.
What we collect
- Newsletter signup — your email address, and optionally your first name and role if you choose to add them.
- Contact form — your name, email address, and the contents of your message.
- Analytics — with your consent, anonymous usage data such as page views, referring site, approximate (country-level) location, and device type.
We do not knowingly collect data from anyone under 16.
Why we use it, and our legal basis
Under the EU General Data Protection Regulation (GDPR), we process your data on these bases:
- To send you the newsletter and the prompt pack you asked for — on the basis of your consent (Article 6(1)(a)).
- To reply to messages you send us — on the basis of our legitimate interest (Article 6(1)(f)) in responding to enquiries.
- To understand and improve how the site is used — on the basis of your consent to analytics cookies.
We never sell your data and never share it with third parties for their own marketing.
Who processes your data
We use a small number of trusted providers ("processors") to run the site. Each only handles the data needed to do its job:
- Beehiiv — our newsletter platform (stores your email and sends the emails).
- Formspree — delivers messages sent through our contact form.
- Vercel — hosts the website and provides cookieless, aggregate visitor analytics (page views and referrers only — no cookies, no cross-site tracking, no personal identifiers).
- Google Analytics — measures anonymous, aggregated site usage; sets no cookies until you consent (see below).
Google Analytics
We use Google Analytics 4 (provided by Google Ireland Ltd / Google LLC) to understand how the site is used, with Google Consent Mode enabled. Until you click "Accept" on the cookie banner, Google Analytics sets no cookies and receives only anonymous, cookieless signals with advertising identifiers redacted — it cannot identify you or your device. When you click "Accept", full analytics is enabled, including cookies that recognise a returning browser. When enabled it collects anonymous, aggregated information such as page views, the page you arrived from, approximate (country-level) location, and device/browser type. We never send Google your name or email, and IP addresses are not stored by GA4. The legal basis for cookie-based analytics is your consent (GDPR Article 6(1)(a)); the pre-consent signals carry no personal identifiers. Google acts as our data processor; data may be processed in the United States under the EU–US Data Privacy Framework. We keep Google Analytics data for the minimum retention period (2 months) and have turned Google Signals and ads personalisation off. You can withdraw consent at any time using the "Cookie preferences" link in the site footer — this re-denies analytics immediately, without a reload.
International transfers
Some of these providers are based outside the EU (for example, in the United States). Where data is transferred outside the EU, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
We keep your newsletter data until you unsubscribe, after which it is removed from active mailing. We keep contact-form messages only as long as needed to deal with your enquiry.
Your rights
Under the GDPR you have the right to: access your data; correct it; have it erased; restrict or object to how we use it; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, contact us. You can unsubscribe from any email using the link at the bottom of it.
If you believe we've mishandled your data, you have the right to complain to your local supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD) — you may also complain to the authority in your own EU country.
Cookies
We only set non-essential (analytics) cookies after you click "Accept" on the consent banner. Essential storage — such as the small entry that remembers your consent choice — is always kept, because the site can't work properly without it. You can change your mind at any time using the "Cookie preferences" link in the footer, which re-opens the banner so you can accept or reject.
Changes to this policy
If we update this policy we'll change the "Last updated" date above. For significant changes we'll make it clear on the site.