Privacy Notice

Last updated: 25 April 2026

Who we are

Pnyx (“we”, “us”) is the data controller. For data protection enquiries, contact us at bema@pnyx.it.

What data we collect

When you subscribe to the Pnyx newsletter, we collect:

  • Email address
  • Marketing attribution parameters from the URL you arrived on (source, medium, campaign)
  • Country derived from your IP address (we do not store your IP address)
  • Browser user-agent string
  • Consent timestamp

Why we collect it

We use your data for two purposes:

  1. Newsletter delivery — sending you the emails you signed up for.
  2. Service improvement — understanding how subscribers find us and which content resonates, so we can improve the service.

Legal basis

We process your data on the basis of your consent (GDPR Article 6(1)(a)). You give consent by checking the consent box and submitting the signup form.

How to withdraw consent

You can withdraw your consent at any time by clicking the unsubscribe link in any email we send you, or by emailing bema@pnyx.it. Withdrawal is as easy as giving consent. Once you withdraw, we stop sending emails and delete your data within 30 days.

Data retention

We retain your data for as long as you remain subscribed. If you unsubscribe, your data is deleted within 30 days of your request.

Cookies and product analytics

Pnyx uses PostHog (European Union region) to understand how visitors use the site: which pages they view, which entries they open, and where they drop off. This helps us decide what to improve.

PostHog sets cookies in your browser to keep your session consistent across page loads. We only enable PostHog if you click Accept on the cookie banner. If you click Decline, PostHog is never initialized and no cookies are set. You can change your mind by clearing your browser’s site data for pnyx.it and reloading.

We do not use any advertising cookies, do not share data with advertisers, and do not enable session video recording.

Third parties

We share your data with the following service providers, each acting as a data processor:

  • Beehiiv (United States) — email delivery and newsletter management
  • Supabase (United States / EU) — database hosting
  • Vercel (United States) — website hosting
  • PostHog (European Union) — product analytics, only when you accept analytics cookies

International transfers

Beehiiv and Vercel process data in the United States. Supabase processes data in the US or EU depending on the project region. PostHog processes data in the European Union. These transfers involve processing your data outside the European Economic Area where the receiving party is in the United States.

Your rights

Under applicable data protection law, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict processing of your data
  • Object to marketing communications
  • Lodge a complaint with your competent Data Protection Authority

To exercise any of these rights, email bema@pnyx.it.