Privacy · Version 1.3 · 3 August 2026

What we collect, which is almost nothing

Sonde has no accounts, no paywall, no advertising and no tracking. You can read every report on this site without giving us anything. This page explains the little that is processed anyway, and what you can do about it.

The short version

We set no cookies. We run no analytics and no advertising or tracking scripts. We do not profile readers, we do not sell or share data with anyone for their own purposes, and there is nothing to log into. Today the only personal data we hold is an email address, and only if you have deliberately given us one.

ControllerWho is responsible

Who is responsible for this data

The controller for the processing described on this page is Sonde Research, [ REGISTERED ADDRESS — still needed ], contactable at privacy@sondemarkets.com.

Sonde is operated from Romania and is subject to Regulation (EU) 2016/679 (the GDPR) and Romanian data protection law. There is no data protection officer; the controller handles requests directly at the address above.

ProcessingWhat actually happens when you visit

What is processed, and why

WhatWhyBasis and retention
Server and network logsIP address, time, page requested, user agent Serving the page to you at all, and protecting the site from attack and abuse. Handled by our hosting provider, Cloudflare, acting as our processor. Legitimate interests (Art. 6(1)(f)) in operating and securing the site. Retained by the provider for a short period on their standard schedule; we do not build reader profiles from it.
FontsServed from this domain The typefaces are served from sondemarkets.com along with the rest of the page. No request goes to Google or any other font host, so no third party learns that you were here. No separate processing and no transfer. The request for a font file is part of the server log described above.
Your email addressOnly if you give it to us Sending you new coverage when it publishes. Nothing else. We do not use it to profile you and we do not pass it to anyone except the mailing provider that delivers the message. Consent (Art. 6(1)(a)), confirmed by double opt-in. Kept until you unsubscribe, which you can do from any email we send, then deleted.
Cookies None are set by this site.
Analytics None currently. If we add measurement it will be a cookieless, aggregate-only tool that does not track individuals across sites, and this page will be updated and re-dated before it goes live.
Subscription and payment dataNone processed today The founding-member tier is not open, so no payment is taken and no billing data exists. When it opens, payments will be handled by a payment provider acting as our processor; we will hold a subscriber's email address and subscription status, and we will never see or store a card number. This page will name the provider, state the basis and the retention period, and be re-dated before the first payment is taken.
Fixed in version 1.1 · stated plainly

Earlier versions of this page disclosed a known weakness: the typefaces were loaded from Google's servers, which sent your IP address to a third party in order to render a typeface — a real privacy cost for no benefit to you, and one a German court has held infringes the GDPR without consent. The fonts are now served from this domain and that transfer is gone. We are leaving the record of it here rather than quietly deleting it.

Your rightsUnder the GDPR

What you can ask us to do

Access

Ask what personal data we hold about you and get a copy of it.

Rectification

Have inaccurate data corrected.

Erasure

Have your data deleted. For a mailing list subscription this is immediate and unconditional.

Restriction and objection

Ask us to stop or limit processing, including objecting to anything we do on the basis of legitimate interests.

Portability

Receive the data you gave us in a machine-readable form.

Withdraw consent

Withdraw consent at any time, without affecting processing carried out before you did. Unsubscribing is the whole of it.

Write to the contact address above and we will respond within one month. If you think we have handled your data badly you can complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), or to the authority where you live.

Transfers and changes

Two more things

Transfers outside the EEA. Our hosting provider is a United States company and may process the data described above outside the EEA under the safeguards in Chapter V of the GDPR. It is now the only such recipient. We hold no reader data on our own servers.

Changes to this page. This notice is versioned and dated at the top. If what we do changes, the version changes with it and the date moves. We will not quietly widen what we collect and leave the date where it was.