Privacy policy

1. Who is responsible for your data

The law requires this page to identify the person answerable for the processing described below. The operator's registered particulars (the name of the entity, its registration number and its seat) are not settled yet, so they are not written here and not guessed at; they belong in the legal notice, and this clause will name them the day they exist. What is already certain is who answers: the contact page reaches the team that publishes Njangi and runs this website, and a request about your own data sent through it is handled as the clause on your rights describes. This notice covers the public website and nothing else. The console, where a circle is actually run, keeps records of its own under its own terms, because a circle cannot be settled without them.

2. What this site collects

Two pages accept something you type, and they are the whole of it:

• The contact form takes your name, your email address and your message.
• The newsletter signup in the footer takes an email address, and nothing else.

Beyond those, nothing about you is collected: this site sets no cookie, runs no audience measurement, embeds no social widget and builds no profile of you. There is no account to open here and no payment to make.

3. What it is used for

Each thing collected has one purpose, and it is the obvious one:

• Your message is used to answer you. Your address becomes the reply address, so that a colleague can write back to you directly.
• An address given to the newsletter is used to send you the newsletter you asked for.
• The address a request comes from is used to rate limit both pages, which is what keeps this site standing when somebody floods it.

No other purpose is pursued, and neither form feeds advertising, scoring or resale.

4. The legal basis

Under the law each of those purposes rests on a basis you can check. Writing to us is a request you make of us, and what you typed is processed in order to answer it. The newsletter rests on your consent, given by submitting the form and withdrawable at any time; the law requires consent to commercial messages to be obtained beforehand and to be provable, which is why the provider records when you subscribed. The rate limit rests on our own legitimate interest in keeping this site available, and it retains no field you typed.

5. Who else sees it

Nobody buys it, and nobody is handed it for advertising. Three parties touch it, each for one job and on our instructions: our email provider, Resend, carries a contact message to our inbox and holds the newsletter list; our hosting provider serves the request your browser makes, as any host does; and a court or an authority entitled under Cameroonian law to require something of us would receive what the law obliges us to give and nothing beyond it. This site itself keeps no copy of any of it: nothing is written to a database and nothing to a file.

6. How long it is kept

This site stores nothing, so there is nothing here to expire. A contact message exists in memory for the length of one request and afterwards only in the mailbox of the person who answers it, where it is kept as long as that correspondence is useful and no longer. A newsletter address stays on the list held by the provider until you unsubscribe, which you can do from the foot of any message we send. The rate limiter holds the address a request came from briefly and only in memory, and discards it when the window expires. The law requires a maximum retention period to be set for each purpose; where the authority sets one shorter than this clause describes, the shorter one governs.

7. How it is protected

The connection to this site is encrypted, as is the call that hands a message to our email provider. The provider's key is read by the server at the moment of that call and is never sent to your browser. When something fails, the server writes a line naming what failed, never a field you typed, never your address and never the key. Both public forms are rate limited, and both refuse an oversized request before reading it. None of that makes a service unbreakable, and the law does not pretend otherwise: it requires measures appropriate to the risk, which is what these are, and it requires us to inform both the authority and you if your data is exposed in spite of them.

8. Your rights, and how to use them

The law gives you the right to be told what is done with your data, to see it, to have it corrected, to have it erased or de-indexed, to object to its processing, to withdraw a consent you have given, to receive it in a portable form, and not to be subject to a decision taken about you by automated means alone. No decision here is taken by automated means. For the newsletter you can exercise the strongest of those yourself, from any message we send. For anything else, write through the contact page, say what you are asking for, and you will get an answer. If that answer does not satisfy you, the law provides for a complaint to the supervisory authority it establishes; the decree organising that authority has not been published, so there is at present no office able to receive one, and we would rather tell you that than name a body you cannot reach.

9. Cookies and tracking

There are none. The language you are reading comes from the address of the page, which is why switching language changes the link rather than storing a preference. No advertising network, no audience measurement and no social widget is loaded on these pages, which is also why you are not asked to accept anything: there is nothing here to accept.

10. Children

This site addresses itself to adults. Under the law a person under eighteen is a minor, and where processing rests on consent a minor's consent has to be given by whoever is legally responsible for them. Nothing on these pages asks for an age, so no age is checked: if you are a minor and have subscribed to the newsletter or written to us, say so through the contact page and what we hold will be removed. Running or joining a circle requires the legal capacity to contract and is governed by the terms of service.

11. Hosting and transfers outside Cameroon

A transfer out of Cameroon is the ordinary case here rather than an occasional event, because the server that answers your browser is in Manchester, in the United Kingdom. The legal notice names the host and the arrangement. Our email provider, Resend, stores its data in the United States, so a contact message and a newsletter address leave for a second country. The law treats a transfer abroad as something the supervisory authority is to authorise in advance, after assessing the protection the destination offers. That authority is not yet in place, so no such authorisation can be applied for; the application will be made, for both destinations, as soon as there is an office able to receive it. In the meantime each transfer happens because it is the only way to do the thing you asked for -- serve you this page, deliver your message, or send you the newsletter -- and each provider is bound to us by a contract that confines it to our instructions. The United Kingdom applies a data protection regime of its own and the United States has no general one, which is a difference worth knowing even though neither destination has been assessed by an authority that does not yet exist.

12. Changes to this page

If what this site does with your information changes, this page changes with it, and the date at the top is what tells you when. Where a change needs your consent rather than merely your knowledge, it will be asked for, not inferred from the fact that you kept using the site.