We're not a corporation. We won't sell your data, rent it, or put it in a spreadsheet with a colour-coded tab.
Last updated: May 2026 · Applies to burnedoutdiaries.com
Plain-language glossary of terms used in this policy:
GDPR — General Data Protection Regulation. The European Union law that protects your personal data and gives you rights over how it is used. It applies to any website that collects data from people in the EU, regardless of where the website owner is based.
EEA — European Economic Area. The 27 EU member states plus Iceland, Liechtenstein, and Norway. GDPR applies across the whole EEA.
Data Controller — the person or organisation that decides why and how your personal data is collected and used. In this case, that is Petra Piperati.
Data Processor — a third party that handles data on behalf of the Data Controller (for example, Substack stores your email so we can send the newsletter).
Personal data — any information that can identify you directly or indirectly, such as your email address or IP address.
Legal basis — GDPR requires a specific legal reason to collect and use personal data. We explain ours in Section 3.
IP address — a numerical label assigned to your device when it connects to the internet. It can indicate your approximate location.
BfDI — Bundesbeauftragte für den Datenschutz und die Informationsfreiheit. Germany's Federal Commissioner for Data Protection and Freedom of Information — the supervisory authority you can complain to if you are in Germany.
Petra Piperati operates The Burned Out Diaries at burnedoutdiaries.com. For the purposes of the GDPR (General Data Protection Regulation — the EU law governing personal data), Petra Piperati is the Data Controller — meaning we decide how and why your data is used.
Contact: confide@burnedoutdiaries.com
This policy applies to all personal data collected through burnedoutdiaries.com, including the newsletter subscription form, email correspondence, and any interactive features on this site.
We do not collect sensitive personal data such as health information, financial details, political opinions, or biometric data.
GDPR (Article 6) requires us to have a specific legal reason — called a legal basis — for each type of data we collect. Here are ours:
We never rely on pre-ticked boxes, bundled consent, or vague "by using this site you agree" language. Consent is always specific, informed, and freely given.
We will never sell, rent, or share your personal data with third parties for their own marketing purposes. Full stop.
Your email address and subscription data are stored by Substack, Inc., a company based in the USA. Substack is certified under the EU–US Data Privacy Framework, which means it meets the EU's standards for protecting personal data transferred outside the EEA (European Economic Area — the EU plus Iceland, Liechtenstein, and Norway).
The website is hosted by Carrd. Carrd stores minimal technical data and applies Standard Contractual Clauses (SCCs — legal agreements approved by the European Commission) for any data transfers outside the EEA.
Google Analytics is used to understand how visitors use this site. Google may transfer anonymised data to servers outside the EEA. Google LLC is certified under the EU–US Data Privacy Framework. Analytics cookies are only set with your explicit consent via the cookie banner.
Email correspondence sent to confide@burnedoutdiaries.com is stored on our email provider's servers within the EEA where possible.
You can request deletion of your data at any time — see Section 7.
Under GDPR, you have the following rights. To exercise any of them, email confide@burnedoutdiaries.com with the subject line "Data Request — [right you are exercising]". We will respond within 30 days.
You also have the right to complain to a supervisory authority — the data protection regulator in your country. In Germany, this is the BfDI (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit — Federal Commissioner for Data Protection) at bfdi.bund.de. In Greece: Hellenic Data Protection Authority (dpa.gr).
We use the following third-party services. Each acts as a Data Processor on our behalf — meaning they handle data according to our instructions and are contractually bound to protect it.
We do not use Facebook Pixel, Google Ads, or any behavioural advertising trackers.
Cookies are small text files stored in your browser. They help the site function and, with your consent, help us understand how it is used. See our full Cookie Policy → for the complete list.
You can change your cookie preferences at any time via the "Cookie settings" link in the footer of any page.
This site is intended for adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has submitted data to us, please contact us at confide@burnedoutdiaries.com and we will delete it immediately.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most current version. If we make significant changes — for example, adding a new third-party service or changing how we use your data — we will notify active subscribers by email.
Petra Piperati
The Burned Out Diaries
We respond within 30 days. If you are not satisfied with our response, you have the right to complain to your national data protection authority.