Privacy Policy

Data controller

The data controller is the operator of the Journal By M. blog. Contact: journalbym.travel@gmail.com.

Contact form

When you submit the contact form, your name, email, subject and message are processed only so I can reply. The forms are designed for static hosting and do not require public API keys.

Newsletter

When you subscribe to the newsletter, your email address is processed for sending updates. Every newsletter service used for the project must provide an unsubscribe option in each email.

Photography and external content

The demo website uses illustrative photos from public sources. For production use, I recommend using your own uploaded photos or verified licensed images.

Cookies and analytics

The default project does not add marketing cookies or tracking scripts. If analytics are enabled later, use a privacy-friendly service and update this policy.

Security

The admin area is protected by the hosting provider's authentication. After deployment, keep registration invite-only, use strong passwords and grant access only to people who actually manage the website.