status.lu takes your privacy seriously and complies with EU Regulation 2016/679 (the General Data Protection Regulation, GDPR) and the Luxembourgish law of 1 August 2018 on the protection of natural persons with regard to the processing of personal data.
Data controller
Status.lu Media, Luxembourg, LU. Contact: contact@status.lu.
What we collect
- Newsletter subscribers: email address and the language you selected, stored to deliver the newsletter. Lawful basis: your consent (Art. 6(1)(a) GDPR).
- Article view log: every time an article page loads, we record the article ID, the publication language, your two-letter country code (derived from the request, never the IP), and the referring website's hostname. We do not store IP addresses, browser fingerprints, or any identifier that would let us recognise you across visits. Lawful basis: legitimate interest in editorial analytics (Art. 6(1)(f) GDPR). Retention: 90 days, after which rows are purged automatically.
- Cookies: a single session cookie holds your search preferences. See the cookie policy for the full list.
- Server logs: our hosting provider (Vercel) records standard access logs which they retain for 30 days. Lawful basis: legitimate interest in security and abuse prevention.
What we do not collect
No advertising trackers. No social-media pixels. No third-party analytics (Google Analytics, Meta Pixel, etc.). No account or profile data — status.lu does not have user accounts.
Your rights
Under the GDPR you have the right to (a) access the data we hold about you, (b) rectify inaccurate data, (c) erase your data, (d) restrict processing, (e) data portability, (f) object to processing based on legitimate interest, and (g) lodge a complaint with the supervisory authority — in Luxembourg, the Commission nationale pour la protection des données (CNPD).
To exercise any right, email contact@status.lu. We respond within one calendar month.
Data sharing
We use Supabase (Frankfurt, EU) to host the database and Vercel (EU regions) to serve the site. We do not sell, rent, or share personal data with any other third party.
Changes
Material changes to this policy are flagged on the homepage for 14 days before taking effect.