Privacy notice.

1. Information we collect

Tackleholm collects only the data needed to operate this editorial site:

• Form submissions — name, email, subject, message body when you use the contact form; email address only when you subscribe to the Set Of Six bulletin.
• Age-gate state — a JSON value stored in localStorage with a 30-day TTL, recording that you confirmed you are 18 or over.
• Cookie consent record — Cookiebot stores your category choices for 12 months.
• reCAPTCHA fingerprint — when you submit a form, Google receives an IP and a behavioural fingerprint to score the request. See section 4.

2. How we use collected information

Form data is used solely to reply to your message. We do not sell, share, or onward-disclose contact data to any third party for marketing. Email-subscription addresses are used only for the Set Of Six quarterly bulletin and can be removed in one click via the unsubscribe link in every send.

3. Cookiebot — processor disclosure

Cookiebot (Cybot A/S, Denmark) is the data processor managing the cookie consent layer on this site. Cookiebot stores a single CookieConsent cookie containing the choices you made. Cybot's privacy notice and the Standard Contractual Clauses governing data processing are at cookiebot.com/privacy-policy.

4. Google reCAPTCHA + UK Extension to the EU-US Data Privacy Framework

Form submissions are scored by Google reCAPTCHA v3, which transfers an IP address and a behavioural fingerprint to Google in the United States. This transfer is permitted under the UK Extension to the EU-US Data Privacy Framework, which is the UK GDPR Article 46 mechanism currently in force for transfers from the UK to certified US recipients. Google LLC is certified under the framework. See policies.google.com/privacy for Google's privacy practices and dataprivacyframework.gov for the framework itself.

5. Form receiver — placeholder note

During the initial deployment phase of Tackleholm, form submissions are routed to https://httpbin.org/post — a public mock endpoint that echoes posts back and does not store them. This is documented and will be replaced by a private receiver before Tackleholm receives sustained public traffic. No personal data is retained until the swap is complete.

6. Data protection measures

The site is served over HTTPS with HSTS. Form fields use autocomplete and minlength validation. The Cookiebot blocking-mode is set to "auto", so non-necessary scripts are blocked until consent is given. The Consent Mode v2 default-denied stub fires before any analytics or marketing tag.

7. Sharing data

We share contact-form data with no third party except where compelled by UK law. Editorial replies are sent from info@tackleholm.digital via the same email provider that delivers our outgoing mail; no copy is forwarded onwards.

8. Your rights as a data subject

Under UK GDPR you have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data. Email info@tackleholm.digital with the subject "Subject access request" and we will respond within 30 days. If you are unhappy with our response you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Contact

Editor-in-chief and responsible officer: Pablo Nilsson. Email info@tackleholm.digital or use the contact form for any privacy-related question.