Privacy & Cookie Policy

This policy covers anastasiakristensen.com. The data controller is Anastasia Kristensen. For any privacy question, or to use any of the rights below, email hello@anastasiakristensen.com. We aim to reply within one month.

No cookies are set by this site. Nothing is written to localStorage or sessionStorage. We count visits anonymously, without identifying you. We only hold personal data you choose to give us: your email address if you sign up to the newsletter, or whatever you send us by email. No advertising, no marketing pixels, no profiling, and no data is ever sold.

Some parts of the page are loaded from music platforms — cover artwork, and players that start when you press play. Those platforms see your request the way any website you visit would. Section 5 explains.

The site is served by Firebase Hosting (Google). When your browser requests a page, Google processes basic request metadata — IP address, browser type and the URL requested — to deliver it and keep the service secure. Google acts as our processor; see the Firebase Data Processing Addendum and Google Cloud's GDPR commitments.

DNS for the domain is provided by Cloudflare. Your DNS resolver asks Cloudflare where the site lives; Cloudflare is not in the path of the page request itself. See Cloudflare's GDPR statement.

Fonts, images of Anastasia and the site's own graphics are served from our own domain.

We use PostHog, hosted in PostHog's EU cloud (Frankfurt, Germany), to understand how the site is used. It runs in cookieless mode: nothing is stored on your device, and there is no identifier that follows you from one day to the next or from one site to another.

What is recorded: which pages are viewed and when you leave them, the referring site, browser and device type, approximate country, technical errors, and a handful of clicks — pressing a streaming or booking link, and whether a newsletter signup was sent or failed. The newsletter event never includes your email address.

To count unique visitors without a cookie, PostHog's servers combine your IP address and browser details with a secret value that changes every day, and keep only the resulting code. Your IP address is removed before the event is stored. We never try to identify individual visitors, session recordings are not possible in this mode, and the data is used only to improve the site. See PostHog's privacy policy.

Release artwork and show images are loaded directly from the platforms that host them: Bandcamp, SoundCloud and Resident Advisor. When your browser fetches an image, that platform receives your IP address, browser type and the address of this page, as with any request on the web. These images do not set cookies on this site.

Music players are not loaded until you press play on a release or mix. Pressing play loads that track's player from Bandcamp or SoundCloud inside the page. From that moment, the platform's own privacy policy applies to the player, and it may set its own cookies — for example to remember that you are logged in. We do not receive any data from these players, and closing the player removes it from the page.

Links to other sites — streaming services, ticket pages, press articles, Instagram — take you to services we do not control. Their privacy policies apply once you are there.

If you enter your email address in the newsletter form and tick the box, the address passes through a small Google Cloud function we run and on to Brevo (Sendinblue SAS, France), who store it and send the emails on our behalf as our processor. See Brevo's privacy policy.

Nothing is sent to you until you confirm. Brevo first emails you a confirmation link; you are added to the list only when you click it. If you never click, you are never added and receive nothing further — you can also ask us to delete the unconfirmed address.

What we store: your email address, the date you confirmed, and which form you used. Nothing else — we do not ask for your name or record your IP address. Brevo's anonymous tracking is switched on, so opens and clicks are only counted in total, never linked to your address. The list is never shared with anyone.

You can withdraw your consent at any time, as easily as you gave it: every email has an unsubscribe link, or email us. Unsubscribing removes you from the list straight away. Brevo keeps the address on a do-not-email list so you are not re-added by mistake; if you would rather it were erased entirely, ask us and we will delete it.

If you write to us or to the booking agents listed on the site, we receive your email address and whatever you include in the message. We use it only to reply and to handle your request, and delete the correspondence once it is no longer needed. The booking agencies handle their own email under their own privacy policies.

This site sets no cookies and writes nothing to localStorage, sessionStorage or any other storage on your device, so there is no cookie banner to accept. The only exception is a music player you choose to start (section 5), which comes from the platform hosting the track and may use its own cookies. You can block or clear third-party cookies in your browser settings at any time; the rest of the site works the same either way.

We rely on the UK GDPR and the EU GDPR as follows:

Delivering the site, security, loading artwork, and anonymous visit statistics — our legitimate interest in serving the pages you ask for, keeping them secure, and understanding in aggregate how the site is used (Article 6(1)(f)). The statistics are designed so they cannot identify you, and you can object at any time by emailing us.

Newsletter — your consent (Article 6(1)(a)), given by ticking the box and confirming by email.

Replying to your emails — our legitimate interest in answering you, or taking steps you ask for before a booking (Article 6(1)(b) or (f)).

Because nothing is stored on or read from your device by this site, the consent rule for cookies under the UK Privacy and Electronic Communications Regulations and the EU ePrivacy Directive does not apply to it.

Brevo stores newsletter data in the EU, and PostHog stores visit statistics in the EU. Google, which runs our hosting and the newsletter function, and Cloudflare may process request data in the United States and elsewhere. Where data leaves the UK or EEA, those providers rely on recognised safeguards: the EU–US Data Privacy Framework and its UK extension, and the European Commission's Standard Contractual Clauses.

Visit statistics — up to 12 months, then deleted automatically. Newsletter address — until you unsubscribe or ask us to delete it. Emails you send us — as long as needed to deal with your request, and no more than two years after our last exchange unless a booking or legal obligation requires longer. Hosting and function request logs — kept by Google for security and troubleshooting, for 30 days by default.

You have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting anything done before. Email hello@anastasiakristensen.com. We may ask you to confirm the request came from you — for the newsletter, usually by replying from the subscribed address. The anonymous visit statistics cannot be linked back to you, so there is nothing we could find to hand over or delete.

If you are unhappy with how we handle your data, you can complain to your local data protection authority — in the UK the Information Commissioner's Office, in Denmark Datatilsynet, or the authority where you live in the EU. We would appreciate the chance to put things right first.

This site is not aimed at children, and the newsletter is not intended for anyone under 16. If you believe a child has signed up, email us and we will delete the address.

If what we collect or how we use it changes, we will update this page and the date at the top. If a change affects newsletter subscribers in a meaningful way, we will tell them by email before it takes effect.