Privacy

The data controller for the Unfiltered website and newsletter is Hubble Media Ltd, 4630 Bellevue Road, Kelowna, BC V1W 3B8, Canada. We publish a senior, data-driven podcast on media, advertising and ad-tech, and a short email briefing to accompany it.

Your email address; the source of your sign-up (e.g. the homepage or a specific episode); and email engagement reported by our delivery provider (deliveries, opens, clicks, bounces and spam complaints). When you subscribe and when you confirm, we also record the date, the version of the consent wording you agreed to, and your IP address and browser user-agent — kept solely as proof of consent.

When you use our website audio player, we record the episode, a successful playback start, active listening time, natural progress milestones, pauses, completion, stalls or playback errors, and aggregate newsletter campaign attribution. We also derive a broad device type and country. A random browser identifier is pseudonymised with a dedicated secret before storage so we can estimate unique browsers; we do not store the original identifier, your raw IP address, full browser user-agent, full referrer URL, email address or subscriber identity with listening activity. Loading a page or audio metadata alone does not create a listen.

Our lawful basis is your consent. The list is double opt-in: you ask to join, then confirm via a link we email you. Nothing commercial is sent until you confirm, and every email carries a one-click unsubscribe.

We use limited first-party player measurement to understand which episodes are useful, whether playback is working, and whether our own newsletter leads to meaningful listening. The data is not used for advertising, sold, or combined with Apple or Spotify identities. Browser Global Privacy Control and Do Not Track signals disable this player measurement.

The newsletter relies on a small number of processors:

• — Supabase (database, hosted in Canada) — the system of record for the list.
• — Resend — email delivery and engagement events.
• — Vercel — website hosting and country-level request information.
• — Cloudflare — bot protection on the sign-up form and content delivery.

While you are subscribed, we keep your data so we can send the briefing. If you unsubscribe (or an address hard-bounces or marks us as spam), we retain the record for up to two years — to honour the unsubscribe and as proof of past consent — after which your email, IP, user-agent and raw delivery records are anonymised in place. The anonymised consent event (date and wording version, with no personal data) is kept as a legal record. One exception, in your favour: your email address stays on our do-not-email suppression list indefinitely, used solely to make sure we never email you again — it is never used for anything else. If you deliberately re-subscribe and confirm, that precautionary entry is lifted.

For website-player analytics, the pseudonymous browser key is broken after 90 days so it can no longer link sessions together. De-linked session records are retained for up to 13 months for year-over-year reporting, then deleted.

You can unsubscribe at any time from the link in any email, or from the preferences page. You also have the right to access a copy of your data or to request its erasure — contact us at the postal address above and we will respond within 30 days.