Privacy Policy
Last updated: 21 April 2026. This policy explains how RetroShell (“we”) collects, uses and protects your personal data. We comply with the UK GDPR and the EU General Data Protection Regulation.
Who we are
RetroShell is operated by Pub.cat, registered in Barcelona, Spain. Data controller: Owen Hughes. Contact: [email protected].
What we collect
- Newsletter subscribers: email address, optional name, timestamp of subscription, and Ghost’s technical metadata (signup source). Used solely to deliver the weekly newsletter and occasional operational emails. No third-party sharing.
- Comment authors: Ghost’s members system stores your name and email when you post a comment. Visible only to us and (for your name) to other readers.
- Analytics: we use a self-hosted Plausible instance on
analytics.pub.cat. Plausible does not use cookies, does not track individual users, does not collect personal data and is GDPR-compliant by default. - Shop customers: if you buy from shop.retroshell.com, that site operates under a separate WooCommerce privacy policy visible at checkout.
- Email correspondence: we retain emails you send us for operational and legal reasons for up to five years.
What we do not do
- We do not run third-party advertising trackers in our default configuration.
- We do not sell or rent personal data to anyone.
- We do not use behavioural or cross-site tracking.
Cookies
See our Cookie Policy for the full list. In short: we set session cookies for Ghost’s logged-in members system. That is it.
Your rights
Under the UK GDPR and EU GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (“right to erasure”).
- Object to processing.
- Receive your data in a portable format.
- Lodge a complaint with your national data-protection regulator (ICO in the UK, AEPD in Spain).
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Retention
Newsletter emails: kept until you unsubscribe (with a short audit window after). Comments: kept until you or we delete them. Correspondence: five years. Analytics data: aggregate only, no individual records.
International transfers
Ghost content is hosted on Pikapod infrastructure in the EU. Our own operational services run on Hetzner (Germany) and Google Cloud (europe-west1). No personal data leaves the EU/UK under normal operations.
Changes to this policy
If we materially change this policy, we will note the change date at the top and, for newsletter subscribers, notify you in a subsequent issue.