Privacy notice — StoryGlide

This privacy notice explains how I, Nathan, handle personal data when you visit StoryGlide (storyglide.pro) or get in touch with me. StoryGlide is a personal blog — not a company with a legal department — but I take your privacy seriously and I aim to comply with Singapore's Personal Data Protection Act 2012 (PDPA) and its related regulations.

I wrote this in plain language on purpose. If anything here is unclear, email me at [email protected] and I will do my best to explain.

Who is responsible for your data

The data controller for this website is me, Nathan, operating StoryGlide as a personal blog. You can reach me at:

Email: [email protected]
Address: Blk 118 Pasir Ris Street 11, #02-40, Singapore 510118
Phone: +65 6228 4484

What this site is (and is not)

StoryGlide publishes personal essays and observations about everyday life in Singapore. It does not sell products, run a membership programme, or carry advertising in the conventional sense. Because the site is small and personal, the amount of data I collect is limited — but limited does not mean unimportant, and I still want you to know what happens when you visit or write to me.

What personal data I collect

When you browse the site. Like most websites, StoryGlide may receive standard technical information from your browser and device — for example your IP address, browser type, operating system, referring page, and the pages you view. If I use analytics cookies (only when you allow them — see the cookies section below), aggregated usage data may also be collected to help me understand whether anyone is reading these stories besides my auntie.

When you use the contact form. If you submit the form on contact.php, I collect the name and email address you provide, the content of your message, and the fact that you gave consent for me to use that information to reply. I do not ask for your NRIC, financial details, or other sensitive categories of data, and you should not send them through the form.

When you email me directly. If you write to [email protected] without using the form, I receive whatever you choose to include — typically your email address, your name (if you sign off with one), and your message. I treat that correspondence the same way as contact-form messages.

What I do not collect on purpose. I do not run user accounts, newsletters, or comment sections on this site. I do not knowingly collect personal data from children under thirteen. If you believe a child has contacted me, please let me know and I will delete the correspondence.

Why I use your data and the legal basis

Under the PDPA, organisations (and individuals acting in a similar capacity) need a purpose for collecting, using, and disclosing personal data, and they need your consent in many situations. Here is how that applies to StoryGlide:

To respond to your messages. When you contact me, I use your name and email to read and reply. I rely on the consent you give by ticking the checkbox on the contact form, or on the reasonable expectation that if you email me directly, you want a response.
To operate and secure the website. Basic server logs help me keep the site running and spot unusual traffic. This is necessary for the ordinary functioning of a website.
To remember cookie preferences. If you interact with the cookie banner, I store your choice so you are not asked on every visit. This is based on your consent when you accept, reject, or customise cookies.
Analytics (optional). If you allow analytics cookies, I may use anonymised or aggregated statistics to see which pages are read most. I will not turn this on unless you consent through the cookie banner.

I do not use your personal data for direct marketing, profiling, or selling lists to third parties. I am not interested in that, and this blog does not work that way.

Cookies and similar technologies

When you first visit StoryGlide, a banner asks whether you accept all cookies, reject all, or customise your choices. Your selection is stored in a cookie on your device so the site can remember it. Cookie preferences are kept for six months, after which the banner will appear again and you can make a fresh choice.

The cookies I use fall into these categories:

Strictly necessary. These are required for basic functions such as remembering your cookie consent decision. They do not track you across other websites.
Analytics (optional). Only set if you allow them. They help me understand general traffic patterns — not to identify you personally.

You can also manage or delete cookies through your browser settings at any time. Blocking all cookies may mean the consent banner reappears each visit, but the blog posts themselves will still load.

Who I share data with

I do not sell or rent your personal data. I may share limited information only in these situations:

Service providers. My website is hosted on infrastructure operated by third-party providers (for example a web host or email delivery service). Those providers process data on my behalf to keep the site online and deliver messages. I choose providers that I believe handle data responsibly, but I do not control their internal systems.
Legal requirements. If Singapore law or a valid legal process requires me to disclose information, I may need to comply. I have never received such a request for this blog, but I mention it for completeness.

I do not transfer your personal data outside Singapore unless a service provider does so as part of hosting or email routing. If that happens, I aim to ensure appropriate safeguards are in place as required by the PDPA.

How long I keep your data

I keep personal data only as long as needed for the purpose I collected it:

Contact messages. I retain emails and form submissions for as long as needed to correspond with you and for a reasonable period afterwards in case you follow up — typically up to two years unless we have an ongoing exchange. You can ask me to delete them sooner.
Cookie consent records. Stored on your device for six months, as noted above.
Server logs. Rotated or deleted according to my hosting provider's retention schedule, usually within a few months.

How I protect your data

I use reasonable technical and organisational measures to protect personal data — for example HTTPS on the site, a contact form with a honeypot field to reduce spam, and limited access to my email inbox. No method of transmission over the internet is completely secure, and I cannot guarantee absolute security, but I do not take a careless approach to something you trusted me with.

Your rights under the PDPA

If you are an individual whose personal data I hold, Singapore's PDPA gives you several rights, subject to exceptions in the law. These include:

Access. You may ask what personal data I hold about you and how it has been used or disclosed.
Correction. You may ask me to correct inaccurate personal data.
Withdrawal of consent. You may withdraw consent for me to use your data, though this may mean I cannot continue a conversation or provide a related service (such as replying to a message).
Portability and other rights. Where applicable under current PDPA rules, you may have additional rights regarding your data.

To exercise any of these rights, email [email protected] with the subject line "Data request" and tell me what you need. I will verify that the request relates to your own data and respond within a reasonable time — generally within thirty days, as the PDPA expects organisations to do, even though I am an individual running a small site.

If you are not satisfied with my response, you may contact the Personal Data Protection Commission (PDPC) in Singapore for guidance on your options.

Third-party links

My posts may mention places or link to external websites I do not control. This privacy notice applies only to storyglide.pro. If you follow a link elsewhere, that site's own policies apply.

Changes to this notice

I may update this page when the site changes or when privacy law evolves. When I do, I will change the "Last updated" date at the top. For significant changes, I may also mention them on the home page, though this is a personal blog and not a corporate portal — the notice itself is the main reference.

This privacy notice is provided for transparency and does not constitute legal advice. If you need formal legal guidance on the PDPA, please consult a qualified professional.