Privacy policy
Written to be read. If anything here is unclear, that is a fault I want to fix — tell me.
Who is responsible
This site is operated by Katherine Therese Fosdick, an individual, based in Depew, New York, contactable at info@fiftyimpressions.com based in Depew, New York, United States. Email is the route for all requests and formal notices; if a matter requires post, ask by email and a postal address will be supplied. There is no company and no staff. Under the GDPR I am the data controller; under US state privacy laws I am the business or operator, as applicable.
What is collected
| Category | When |
|---|---|
| Technical data logged by the server: IP address, browser and device type, operating system, referring page, pages viewed, date and time | Always |
| Your cookie choice, stored locally in your own browser | Always |
| Analytics: pages viewed, time on page, approximate city-level location, aggregated | With consent |
| Advertising identifiers used to measure whether an ad led to a visit and to limit ad repetition | With consent |
| Your name, email address and message | If you write to me |
I do not ask for or knowingly collect sensitive personal information. I do not sell personal information and I do not share it for cross-context behavioural advertising in the sense used by California law. There are no accounts, no payments and no bookings on this site, so there is no payment or reservation data at all.
Why, and on what basis
- To deliver and secure the site — technical data. GDPR basis: legitimate interest in running a working, secure site.
- To remember your cookie choice — strictly necessary, and required so a refusal can be honoured.
- To see which pages get read — analytics. GDPR basis: consent.
- To measure advertising, and personalise it if you allow that — GDPR basis: consent.
- To reply to you — correspondence. GDPR basis: legitimate interest in answering a message you chose to send.
Where I rely on consent you can withdraw it at any time, with no effect on processing already carried out. Use the link in the footer.
Advertising, and what Google receives
This site is funded by advertising and may use Google advertising and measurement products, including Google Ads conversion measurement, Google Analytics and Google's tag manager.
It runs Google Consent Mode v2. In practice:
- Before you choose, advertising, analytics, personalisation and functionality storage are all set to denied. No advertising or analytics cookie is written.
- Advertising data redaction stays on until you consent, so any signal sent is stripped of advertising identifiers and used only for coarse, cookieless modelling.
- If you accept, those signals are updated to granted and the tags operate normally.
- If you refuse, they stay denied. The site behaves identically either way.
Google acts as an independent controller for its own advertising purposes, governed by Google's own privacy policy and advertising terms. You can also control ad personalisation in your Google account settings, independently of anything here.
Who receives data
- Hosting and content delivery provider — to serve the site.
- Google — for advertising and measurement, only within the limits of your consent.
- Email provider — if you write to me.
- Authorities — only where legally required.
Nothing is disclosed to advertisers, restaurants or booking platforms. Some providers, including Google, may process data outside your country, including in the United States; where EU data is involved, transfers rely on standard contractual clauses or an applicable adequacy decision.
How long it is kept
| Data | Kept for |
|---|---|
| Server logs | Up to 12 months |
| Analytics, aggregated | Up to 14 months |
| Advertising identifiers | Per Google's published retention |
| Cookie preference | 12 months, or until you clear it |
| Correspondence | 24 months from last contact |
US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Texas or another state with a comprehensive privacy law, you may have the right to know what personal information is collected and why, to obtain a copy, to correct it, to delete it, to opt out of sale or of sharing for targeted advertising, and not to be discriminated against for exercising any of these.
I do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that front — but you can still refuse advertising cookies at any time through cookie settings, and that refusal is honoured, including Global Privacy Control signals where your browser sends them. To exercise any other right, write to info@fiftyimpressions.com with "Privacy" in the subject line. I will respond within 45 days.
GDPR rights
If you are in the EU, EEA or UK you have the right to access your data, correct it, have it erased, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. Write to info@fiftyimpressions.com and I will respond within one month. If you are not satisfied you may complain to your national supervisory authority.
Children
This site is intended for adults and is not directed to children. I do not knowingly collect information from anyone under 16, or under 13 in the sense of the US Children's Online Privacy Protection Act. If you believe a child has provided information, write to info@fiftyimpressions.com and I will delete it.
Changes
I may update this policy. The version and date at the top will change, and material changes will be flagged on the site. Where a change affects data collected on the basis of consent, I will ask again.