Last updated
Loro is an independent publisher. We make money from readers and from advertising, not from data about you. This page says exactly what we collect, why, and how to get rid of it — in plain terms, because a privacy notice nobody can read is not a privacy notice.
Loro is the data controller for the personal data described here. Contact us at phil.sumner@gmail.com for anything on this page, including the rights set out below.
Nothing is stored on your device and no profile is built. Our analytics counts the visit without identifying you (see below); we do not embed social or video players, and we do not load fonts, scripts or stylesheets from anyone else — everything the page needs comes from our own servers, so no third party learns that you were here.
Our hosting provider, Vercel, keeps short-lived server logs as an ordinary part of serving a website. These can include your IP address and are used to keep the site running and to deal with abuse. We do not use them to identify readers.
The full list, because it is short enough to print:
| Name | What it does | Who it is for | Expires |
|---|---|---|---|
| loro_nr | Keeps a signed-in newsroom session. Contains no personal data — it is a one-way hash, not your details. | Loro editorial staff only | 30 days |
| loro_consent | Remembers the answer you gave to the cookie prompt, so we can honour it and stop asking. Contains only your own choice — analytics=0,advertising=0 or similar. | Everyone | 6 months |
Both are strictly necessary — one signs you in, the other stores your answer so we can respect it — so neither needs your permission under the ePrivacy rules.
You will have seen a prompt asking about analytics and advertising cookies. Being straight about what it is for: we set no advertising tags today, and our analytics sets no cookies at all. The prompt asks about advertising now because Loro is a young publication that expects to carry it, and the mechanism that honours your answer has to exist before the first tag does.
What that means in practice. Vercel Web Analytics counts the page you read; it tells visits apart by a hash that is discarded within a day, not by a cookie or an ID, and the counts are used only to improve the site. In the UK and most countries it runs unless you switch it off, as UK law allows for this kind of measurement; in the EU and EEA it waits for your yes. Say no and it stops. Advertising loads nothing today either way, and we will update this page before it does. Rejecting is exactly one click, the same as accepting, and you can change your mind at any time from the Cookie preferences link in the footer.
Two categories. Advertising never loads until you allow it; analytics works as described above:
The subscribe forms ask for your email address, and optionally your name, organisation, role and a note about what you are interested in. We store what you type, along with which form you used and when.
To stop at any time, email phil.sumner@gmail.com. Every newsletter we send also carries a one-click unsubscribe link.
When an AI crawler — GPTBot, ClaudeBot, PerplexityBot and around twenty others — fetches one of our pages, we record which bot it was, which page it took, and when. We do this to understand whether our journalism is reaching answer engines, and whether a piece that is not being cited was never crawled or was crawled and passed over.
These are automated systems, not people. We do not log human visits this way, and we do not record IP addresses.
Loro does not currently carry advertising and runs no advertising scripts. When we do, our intention is contextual advertising — ads chosen by what the page is about, not by who you are. If any advertising partner we use requires tracking that is not strictly necessary, it will be behind the consent choice described above and will not load unless you say yes.
Loro is a journalism publication. Our reporting draws on public registers — Companies House, the FCA's PDMR filings, SEC EDGAR, the Electoral Commission register, Hansard and others — and that reporting sometimes concerns named individuals.
This processing is carried out for journalistic purposes and relies on the exemption for journalism in UK and EU data protection law. If you believe something we have published about you is inaccurate, write to phil.sumner@gmail.com and we will look at it.
You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to our processing, or ask for your data in a portable form. Where we rely on consent, you can withdraw it at any time without giving a reason.
Email phil.sumner@gmail.com. We will respond within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk, or to the supervisory authority where you live.
If what we collect changes, this page changes with it and the date at the top moves. We will not quietly broaden what we do with data you already gave us.