Small print.
Clear choices.

Analytics and cookies

This site uses Google Analytics 4 to understand visits, page views, retailer clicks, and whether the newsletter and contact forms succeeded or met a limited error state. Analytics events never include names, email addresses, message text, form contents, Turnstile tokens, or raw internal errors.

When analytics is active, Google receives information such as the page URL and title, referrer, approximate location, browser and device details, and a pseudonymous identifier. Google Analytics uses first-party cookies named_ga and _ga_<container-id> to distinguish visitors and sessions. These cookies expire no later than 180 days after they are first created and are not extended on each visit.

For visitors in the UK and European Economic Area, Google Analytics stays off and no Google analytics request is made until “Accept analytics” is selected. Outside those regions it is on by default, but can be switched off at any time through “Cookie settings” in the footer. Advertising storage, Google Signals, and advertising personalisation remain disabled everywhere.

The site remembers an accept or reject choice for 180 days in the strictly necessary sh_analytics_consent preference cookie. Rejecting or withdrawing consent stops future analytics and removes the site’s_ga cookies from the browser.

Regional choice

Vercel, the hosting provider, supplies the site with a two-letter country code derived from the request’s IP address. The application uses only that country code to decide whether the first-visit analytics choice is required; it does not save the code in Neon or add it to analytics events. If the code is absent or invalid, analytics remains off until a choice is made.

Mailing-list details

If you join the mailing list, this site stores your email address, when you consented, the version of the consent wording, and that the signup came from the homepage. The form does not ask for your name.

Contact messages

If you use the contact form, the site processes your name, email address, subject, and message so Sophia can read it and reply. The message is delivered by Resend to Sophia’s private inbox and is not added to the mailing list or stored in the site’s Neon database.

Cloudflare Turnstile processes limited device and network information to distinguish real submissions from automated spam. Its token is verified by the site before a message is sent.

Why it is used

Your email is used only to send occasional news about Sophia Hannah’s books. Joining is optional and the lawful basis is your consent.

Contact-form details are used only to handle your enquiry and any reasonable follow-up. They are not used for marketing unless you separately join the mailing list.

Where it is stored

Analytics data is sent to Google. The GA4 property is configured for two months of user- and event-level retention; this setting does not remove standard aggregated reports on the same schedule. ReadGoogle’s privacy policy for information about Google’s handling of data.

Subscriber records are stored in the site’s Neon Postgres database. They are not used for advertising profiles or sold as a mailing list.

Contact messages pass through Resend for delivery and are received in Sophia’s email account. Provider records and correspondence should be kept only for as long as reasonably needed to deliver the message, deal with the enquiry, or maintain necessary correspondence.

How long it is kept

A mailing-list record is kept until you unsubscribe, ask for it to be deleted, or the mailing list closes. Duplicate signups do not create duplicate records.

Your choices

Use “Cookie settings” in the footer to accept, reject, or withdraw analytics permission. Withdrawing takes effect immediately for future activity in this browser.

Every mailing will provide a way to unsubscribe. To ask what is held or request deletion before a mailing arrives, emailpublishing@theconradpress.comand identify the request as relating to the Sophia Hannah mailing list.