Privacy Policy

Last updated: April 7, 2026.

This Privacy Policy explains how Gunovula ("we", "us", or "our"), operated at gunovula.com, collects, uses, and shares information when you visit our website. We are committed to protecting your privacy and complying with applicable privacy laws including Canada's PIPEDA, the European Union's GDPR, and applicable US state privacy laws (including the CCPA/CPRA for California residents).

1. Information We Collect

1.1 Information You Provide

We operate an email newsletter managed by Kit (formerly ConvertKit). If you subscribe to our newsletter, we collect your email address (and optionally your first name). This information is used to send you our weekly crypto education newsletter and broadcast updates. You can unsubscribe at any time via the unsubscribe link in every email. We do not operate user accounts or contact forms.

1.2 Automatically Collected Data

When you visit our website, our hosting infrastructure may automatically record:

  • IP address (typically anonymized or truncated)
  • Browser type and version
  • Referring URL and pages visited
  • Date and time of your visit
  • Device type (desktop, mobile, tablet)

This data is used for operational purposes (security, uptime monitoring) and is not linked to individual identities.

1.3 Analytics — Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use Gunovula so we can improve our content. GA4 collects:

  • Page views, session duration, and traffic sources
  • Device type, browser, and approximate geographic region (country/city level)
  • Affiliate link clicks (tracked as events) to understand which tools our readers find useful

This data is aggregated and pseudonymous, it is not linked to your identity. IP anonymization is enabled (IP addresses are truncated before storage). We do not use GA4 to build advertising profiles or share data with third-party advertisers.

GA4 analytics are subject to your cookie consent. You can opt out at any time by:

2. Cookies & Consent Management

2.1 Klaro

We use Klaro to manage cookie consent on this site. When you first visit, Klaro displays a cookie notice with Accept and Customize options. In the customize view, all available cookie categories start selected, and you can still choose Deny all. You can update your preferences at any time by clicking Cookie Preferences in the footer.

Cookies are grouped into the following categories:

  • Necessary: Required for the website to function and to remember your cookie preference. These cannot be disabled.
  • Analytics: Help us understand how visitors use the site, including page views and affiliate link click events in Google Analytics 4. Only set if you consent.

2.2 Google Analytics Cookies

When you consent to analytics cookies, Google Analytics 4 sets the following cookies:

  • _ga — distinguishes unique visitors; expires after 2 years
  • _ga_* — session state; expires after 2 years

2.3 Third-Party Cookies

Third-party services embedded on this site (such as the ChangeNOW swap widget) may set their own cookies or collect data under their own privacy policies. We recommend reviewing their policies:

You can control or delete cookies through your browser settings at any time, independently of Klaro preferences.

3. Affiliate Links

Some links on this site are affiliate links. This means that if you click on a link and make a purchase or sign up, we may receive a commission at no additional cost to you. If you allow analytics cookies, we also record affiliate link clicks as anonymized GA4 events. Our current affiliate partners include:

  • ChangeNOW — instant cryptocurrency swaps
  • Stoic AI — automated crypto trading
  • Bitsgap — multi-exchange trading bots
  • HaasOnline — advanced trading bot platform
  • Coinrule — no-code automated trading

Affiliate links are clearly labelled on our site. Our editorial content is not influenced by affiliate relationships — we only recommend products we genuinely believe are valuable to our readers.

When you click an affiliate link, the third-party merchant may collect data about your visit under their own privacy policies. We are not responsible for data collected by third-party sites.

4. Newsletter — Kit (ConvertKit)

We use Kit (formerly ConvertKit, operated by ConvertKit LLC) to manage our email newsletter. When you subscribe:

  • We collect your email address and optionally your first name.
  • This data is stored and processed by Kit as a third-party data processor on our behalf.
  • We use it exclusively to send you our crypto education newsletter and weekly broadcast emails.
  • We do not sell, rent, or share your email address with other third parties for their own marketing purposes.

You can unsubscribe at any time by clicking the unsubscribe link in any email we send. Upon unsubscription, Kit will mark your address as suppressed. You may also request complete deletion of your data by contacting us (see Section 14).

Kit's data practices are governed by their Privacy Policy. Kit is GDPR-compliant and participates in the EU-US Data Privacy Framework.

5. How We Use Your Information

We use the information we collect to:

  • Operate and improve the Gunovula website
  • Understand how visitors use our content (once analytics are enabled)
  • Ensure the security and integrity of our site
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for behavioral advertising.

6. Data Sharing

We may share information in the following circumstances:

  • Service providers: Our hosting provider (Vercel) processes server logs. Vercel's privacy practices are governed by their Privacy Policy. Google processes analytics data under their Privacy Policy. Kit (ConvertKit) processes newsletter subscriber data under their Privacy Policy.
  • Legal requirements: We may disclose information if required by law, court order, or government request.
  • Business transfers: If Gunovula is acquired or merges with another entity, your information may be transferred as part of that transaction.

7. Data Retention

We retain data for the following periods:

  • Server logs: Retained for a short period for security purposes and then deleted or anonymized.
  • Google Analytics data: Retained for 14 months in GA4 (our configured retention period), after which it is automatically deleted.
  • Newsletter subscriber data (Kit): Retained for as long as you remain subscribed. Upon unsubscription, your address is suppressed. You may request full deletion at any time by contacting us.

8. Your Rights

7.1 Canadian Users (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

  • Know what personal information we hold about you
  • Request correction of inaccurate information
  • Withdraw consent for collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
  • Challenge our compliance with PIPEDA to the Office of the Privacy Commissioner of Canada

7.2 EU/EEA Users (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your personal data ("right to be forgotten")
  • Restriction — request that we restrict processing of your data
  • Data portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent

Our lawful basis for processing is legitimate interests (operating our website and improving content) and, where consent is required, your explicit consent.

7.3 California Users (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we collect, use, and disclose
  • Request deletion of personal information (subject to exceptions)
  • Opt out of the sale of personal information — we do not sell personal information
  • Non-discrimination for exercising your rights

9. Children's Privacy

Gunovula is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. International Data Transfers

Our website is hosted on Vercel, which may store and process data in the United States and other countries. If you are located in the EU/EEA, be aware that these countries may not have the same data protection laws as your jurisdiction. By using our site, you consent to this transfer. Google Analytics 4 data is processed by Google in the US. Newsletter data collected via Kit (ConvertKit) is processed in the US; Kit participates in the EU-US Data Privacy Framework.

11. Security

We use HTTPS encryption on all pages to protect data in transit. Our hosting provider (Vercel) applies industry-standard security measures. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our site contains links to third-party websites (affiliate partners and external resources). We are not responsible for the privacy practices of these sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Updates to This Policy

We will update this Privacy Policy when we add new features (Google Analytics, email newsletter, or other data collection). Changes will be reflected on this page with an updated "Last updated" date. We encourage you to check this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Gunovula
Website: https://gunovula.com/
Email: Contact us by email
We will respond to verifiable requests within 30 days (or as required by applicable law).

This privacy policy was last reviewed and updated on April 7, 2026.