Privacy, without the mystery.
Last updated: 10 November 2026
We want you to enjoy The Waggles without wondering what happens to your information. Here's what we collect, why we use it and how you stay in control.
Who we are
The Waggles is run by Lincoln Peters, a sole trader based in Sydney, NSW, Australia. ABN: 83 300 221 341.
You can contact us about privacy or your subscription at [email protected].
What we collect
When you sign up, we collect your email address, confirmation that you are aged 16 or over, and a consent record showing when you agreed and which version of the wording you saw. We don't ask for your date of birth or store your full age range.
To protect the sign-up from misuse, we use short-lived, keyed hashes of network identifiers for rate limiting. We don't store raw IP addresses in our subscriber database. Our hosting and email delivery services may also process technical security and delivery logs.
Why we use your information
With your consent, we send Waggles updates about books, merch, music, the show and the site launch. Signing up is optional. We don't sell your information or use it for advertising tracking.
When you open our emails or click a link in them, we learn that this happened. We use that only to improve our emails. See Email opens and clicks below.
We use double opt-in: after you sign up, we send a confirmation email. You only join the confirmed mailing list when you follow that link. If you didn't request it, you can ignore it or use the removal links.
Unsubscribe or ask us to delete it
Every email includes an unsubscribe link. You can unsubscribe any time without creating an account. You can also ask us to delete your signup information by contacting [email protected] or using the deletion link provided with your subscription.
After you unsubscribe or ask for deletion, we remove your email and subscription details from the active list. We keep only a minimal suppression record so we don't email you again. This uses a keyed email hash rather than your readable email address, with limited information needed to honour your choice.
Where information is stored
We use Cloudflare Pages, Workers and D1 to host the site and manage the signup records. Confirmation and update emails are sent through Brevo (Brevo SAS, formerly Sendinblue SAS, Paris, France), our email delivery provider. These services process information on our behalf to run the site, protect it and deliver messages.
Cloudflare and Brevo may process data outside Australia. We review how our service providers handle information and use appropriate contractual and security arrangements. Where applicable, we take reasonable steps to meet Australian cross-border privacy requirements and use appropriate safeguards for international transfers.
Email opens and clicks
Our emails are sent through Brevo and contain a tiny open-tracking pixel and tracked links. These tell us whether an email was opened and which links were clicked. Brevo may also record basic technical details that come with each open or click, such as the time, IP address and email app or device. We use this only to improve our emails, for example what to write about and when to send. We don't use it for advertising and we don't sell it.
Open and click data is stored by Brevo, which keeps its databases on servers in the European Union (France, Germany and Belgium), under Brevo's own retention periods. Brevo's support teams in other countries, such as the United States and India, may access it under Brevo's data protection safeguards. Your sign-up record (email address, age confirmation and consent record) is stored in our Cloudflare D1 database. We don't copy open or click data into our own database.
To opt out, use the unsubscribe link in any email. That stops our emails, so there is nothing more to track. You can also turn off automatic image loading in your email app, which blocks the open-tracking pixel. Links you click in an email are still tracked. The unsubscribe button that many email apps show at the top of our emails is not tracked.
How long we keep it
Unconfirmed sign-ups are deleted after 7 days. Confirmed subscriptions are kept until you unsubscribe or ask for deletion. We retain only the minimal suppression record needed to prevent further email after that.
Rate-limit hashes are short-lived and are cleared during routine cleanup. Service-provider logs and backups are subject to their own retention and deletion processes. We limit access to subscription data and use security controls to protect it.
Age and children's privacy
The Waggles mailing list is for people aged 16 or over. Under-16s are not allowed to sign up. We ask a neutral age question before enabling email entry and require you to confirm you are 16+.
We don't knowingly collect personal information from children under 13. If we discover such information, we stop using it and delete it. If you are a parent or guardian and believe a child has provided information, please contact [email protected] so we can investigate and remove it. We do not offer a parental-consent signup route.
Cookies, analytics and other websites
We use Cloudflare Web Analytics for privacy-friendly, cookieless visitor stats (aggregate page views and performance, not advertising tracking). We do not use analytics cookies, advertising pixels or social-media tracking embeds on the site. Our emails do use an open-tracking pixel and tracked links, as explained above. The newsletter doesn't require cookies to sign up, confirm, unsubscribe or delete a record.
As the site grows, we may add, change or remove cookies and similar technologies at any time, for example for analytics, the shop or your preferences. When that happens, we will update this policy. If we add non-essential cookies later, we will tell you on the site and ask for your consent where the law requires it.
Our book links take you to Amazon, and our music links take you to Spotify and Apple Music. Your activity there is covered by their own terms and privacy practices, not this policy.
The VHS series player only loads YouTube, in its privacy-enhanced mode, after you press play. Once it loads, YouTube (Google) may set cookies or similar storage and collect viewing data under Google's own privacy policy.
Your rights and questions
You can ask to access, correct or delete your information, withdraw your consent, or raise a privacy concern. Email [email protected]. We may need to check that a request is yours without asking for unnecessary information.
Please contact us first if you have a complaint so we can try to resolve it. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).
If you visit from the EU or UK, we rely on consent for email updates and offer the same access, correction, deletion and withdrawal choices. Where relevant data protection law applies, you may also have rights to restrict processing, object, request portability and complain to your local data protection authority.
Changes to this policy
We may update or change this policy at any time for any reason, including changes to the site, our services, the law or other circumstances. The "Last updated" date at the top shows the current version. If a change is significant, we will flag it on the site, and where we hold your email we may also notify you. If we change how we use your information, we will explain that clearly and seek fresh consent where required. Continued use of the site after an update means the updated policy applies.