Privacy Policy

Our Privacy-First Approach

Laksa is designed with privacy at its core. Unlike most platforms, we track content performance, not user behavior. We don’t build behavioral profiles, we don’t track you across sites, and we don’t sell your data to advertisers.

Key Principles:

Content-focused analytics: We measure how content performs, not how individuals behave
Minimal data collection: We only collect what’s necessary to provide our services
No cross-site tracking: Your activity stays private to each site
No advertising network: We don’t participate in ad tracking ecosystems
You control your data: Easy access, export, and deletion of your information

This policy explains what data we do collect and how we use it.

Introduction

Laksa is a content management and newsletter platform operated by Geodica Ltd. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

Information We Collect

Account Information

When you create an account on Laksa, we collect:

Email address
Name (if provided)
Password (stored encrypted)
Account preferences and settings

Newsletter Subscription Information

When you subscribe to newsletters on Laksa-powered sites:

Email address
Subscription preferences
Subscription source (eg subscription form, API)
Verification status and timestamps

Engagement Data

Laksa tracks content engagement, not user behavior. We collect aggregate information about how content performs, but we do not create individual user profiles or track behavior across sites.

What We Track:

Content Performance: Which links are clicked, which posts receive votes/reactions
Geographic Data: High-level location information (country level only) to understand content reach
Email Engagement: Opens and clicks on newsletter links (see Email Tracking below)

What We Don’t Track:

Individual user browsing history
Cross-site tracking or behavioral profiling
Personal identification tied to content interactions
Detailed analytics about individual users

Vote Deduplication: We use simple browser cookies to prevent duplicate votes on the same content (eg preventing multiple thumbs-up clicks). These cookies are functional only, not used for tracking or profiling.

Technical Information

We automatically collect minimal technical information necessary for service operation:

IP addresses (for security and country-level geographic data)
Browser type and version (for compatibility)
Device information (for responsive design)
Referring URLs (to understand traffic sources)
Access times and dates (for security monitoring)

This technical data is not linked to individual user profiles or used for behavioral tracking.

How We Use Your Information

We use the collected information to:

Provide Services: Deliver newsletters, manage subscriptions, and display content
Improve Content: Analyze engagement to help content creators understand what resonates with their audience
Communicate: Send transactional emails (subscription confirmations, magic links, notifications)
Security: Detect and prevent fraud, abuse, and security incidents
Compliance: Meet legal obligations and enforce our Terms of Use

We do not use your information for:

Behavioral advertising
Cross-site user tracking
Building detailed user profiles
Selling or renting to third parties

Email Tracking

Laksa newsletters include basic engagement tracking:

Open Tracking: A small, invisible tracking pixel records when an email is opened. This is tied to the newsletter recipient for delivery metrics only.
Click Tracking: Links are rewritten to track clicks before redirecting to the destination. Click data is associated with content performance, not individual user profiles.
Purpose: Help content creators understand which content resonates with their audience and measure newsletter effectiveness.

Newsletter engagement data (opens/clicks) is tied to your subscription for delivery purposes but is not used to build behavioral profiles or cross-reference with other activities.

You can disable image loading in your email client to prevent open tracking, though this may affect email display.

Data We Deliberately Don’t Collect

As part of our privacy-by-design philosophy:

No behavioral profiles: We don’t build profiles of individual user interests or behavior
No cross-site tracking: We don’t track users across different Laksa-powered sites
No advertising identifiers: We don’t use or support third-party advertising tracking
No detailed location tracking: Geographic data is limited to country-level aggregates
No browsing history: We don’t track which pages you visit or how long you stay

Data Sharing and Disclosure

We do not sell your personal information. We may share data in these limited circumstances:

Service Providers: Third-party services that help us operate Laksa (email delivery, database hosting, infrastructure). All service providers operate under strict data processing agreements. See our Service Providers page for a current list.
Site Owners: Content creators can see aggregate statistics and subscriber lists for their sites. They can see newsletter engagement tied to email addresses but cannot access cross-site data.
Legal Requirements: When required by law, court order, or government request
Business Transfers: In the event of a merger, acquisition, or sale of assets

Your Rights

GDPR Rights (European Users)

If you are in the EU/EEA, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (“right to be forgotten”)
Restriction: Limit how we process your data
Portability: Receive your data in a machine-readable format
Object: Object to processing based on legitimate interests

All Users

Regardless of location, you can:

Unsubscribe: Use the unsubscribe link in any newsletter
Manage Subscriptions: View and manage all subscriptions at /account/subscriptions
Export Data: Request a complete export of your data via the “Export My Data” button
Delete Account: Request account deletion (contact us)

Data Retention

We retain your information for as long as:

Your account is active
Needed to provide services
Required for legal, tax, or accounting purposes

Newsletter Data: Engagement data is retained for analytics, but can be deleted upon request.

Unsubscribed Users: We retain email addresses to honor unsubscribe requests and prevent re-subscription.

Content Analytics: Aggregate content performance data is retained indefinitely but is not linked to individual users.

Cookies and Tracking

Laksa uses minimal cookies:

Session Cookies: Required for authentication and site functionality
Vote Deduplication: Simple cookies to prevent duplicate votes (not used for tracking)
Analytics: First-party analytics only, focused on content performance

We do not use:

Third-party advertising cookies
Cross-site tracking cookies
Behavioral profiling cookies

Children’s Privacy

Laksa is not intended for users under 16 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

Security

We implement industry-standard security measures:

Encrypted data transmission (HTTPS/TLS)
Encrypted password storage (bcrypt)
Secure authentication (magic links, API keys)
Regular security audits and updates
Infrastructure with DDoS protection

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

International Data Transfers

Laksa is operated from the United Kingdom. If you access our services from outside the UK, your information may be transferred to, stored, and processed in the UK or other countries where our service providers operate.

For EU/EEA users, we ensure appropriate safeguards are in place for international data transfers in accordance with GDPR requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Updating the “Last Updated” date and version number
Posting a notice on our website
Sending an email to registered users (for significant changes)

Your continued use of Laksa after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Privacy Inquiries: privacy@geodica.com General Support: help@laksa.io

Mail: Geodica Ltd The London (W1W 5PF) Office 5th Floor 167-169 Great Portland Street London, W1W 5PF United Kingdom

Company Registration: 09960797

This policy is effective as of October 27, 2025.