Privacy
The short version: you can start receiving the stories through the subscribe box on this site, or by commenting a keyword on one of our Instagram or Facebook posts. The subscribe box sends your email straight to Substack and princefreddie.com never sees it. The social-message path sends your email to us, and we use Sender.net to deliver a short welcome series. Beyond that the site keeps almost nothing: anonymous usage analytics that load only if you allow them, and a small cookie that varies the picture at the top. Here is the longer version.
Who we are
Prince Freddie Sleep Stories is run by Karolis Jasinskas, a sole trader based in the United Kingdom, who writes the stories from a small village on the Spanish coast. It runs the website at princefreddie.com. Contact: studio@princefreddie.com. We are the data controller for the site analytics described below, and for any email address you send us through a direct message on Instagram or Facebook. For an email you type into the Substack box, Substack is the controller. The next sections explain each path.
The Substack subscribe box
The "subscribe" box on this site is an embedded Substack form. When you type your email and submit it, it goes directly to Substack. It does not pass through princefreddie.com, and we never see or store it. For this path, Substack is the data controller: what they collect, how they use it, and how you exercise your rights over it are governed by Substack's privacy policy. Substack delivers the story emails, and every one has a one-click unsubscribe.
The free story sign-up form ("Seven Quiet Nights")
On some pages we offer a form where you can enter your email address to receive a short welcome series: seven short sleep stories, one each evening for a week. When you submit this form, your email goes to Sender.net, our email tool, and we are the data controller for this path. Here is what happens and what we hold:
- Confirmation first. We immediately send you a confirmation email. Nothing else is sent until you tap the link in it. If you do not tap it, we delete the address within a short time and nothing more arrives.
- The seven nights. Once confirmed, we send you one short sleep story each evening for seven evenings. Each email contains a link to the story on our Substack page, where you can read it or listen to it free. Every email has a one-click unsubscribe.
- After the week. We may send occasional further story announcements, roughly one a week. You can stop these at any time with the one-click unsubscribe in any email, or by writing to us.
- What we hold. We store only the email you enter, and any first name you choose to give, in Sender.net. We do not collect anything else from you through this form.
Our lawful basis is your consent under UK GDPR and PECR: entering your email, then clicking the confirmation link, is the two-step opt-in. You can withdraw consent at any time using the one-click unsubscribe in any email, or by emailing us at studio@princefreddie.com and we will remove you from Sender.net within 30 days and confirm when it is done.
By Instagram or Facebook message
You can ask for a short welcome series of sleep stories by commenting a keyword we mention (for example, SLEEP) on one of our Instagram or Facebook posts. An automation will then send you a private message asking for your email. If you reply to that message with your email address, we will:
- send you the first story link back in the same conversation;
- save your address to our contact list so we can recognise you; and
- add your address to our email tool (Sender.net) so it can send you the remaining stories in the welcome series.
For this path we are the data controller: you have sent your address to us, not to Substack, and it is received by our own endpoint hosted on Cloudflare. We store only the email you choose to send, together with the social-media name or handle attached to the conversation. We do not collect anything else from your profile. You can stop the emails at any time with the one-click unsubscribe in any of them, and you can ask us to delete your address entirely (see Your rights). The tools we use to run this (Zernio, Sender.net and Meta) are listed under Who else is involved.
What the site itself collects
Two things, neither of which identifies you by name:
- Usage analytics (only if you allow them). We use Google Analytics (loaded via Google Tag Manager) to understand things like how many people visit and which pages they read. It records page views, approximate location, device and browser type, and how you arrived. It does not load until you opt in through the cookie banner. If you decline, our Google tags run in a privacy-preserving mode that stores nothing on your device. We use it only to improve the site.
- A preference cookie. A small first-party cookie
(
pf-hero) remembers which illustration you last saw at the top of the page, so a different one shows next time. It holds no personal data and is not used for tracking.
We do not make automated decisions about you that have legal or similarly significant effects, and we do not profile you.
Cookies
Essential cookies run the site (including our own pf-consent
and pf-hero preference cookies). Analytics cookies load only
if you allow them. The full list, with purposes and expiry, is on our
cookie notice, and you can
at any time. You can also clear or block cookies in your browser, and the
site still works without the optional ones.
Why we can use it (lawful basis)
For the site analytics, our basis is your consent: under PECR (the UK rules for cookies) the analytics cookies are not set until you opt in through the cookie banner, and under UK GDPR we then process the resulting analytics data on the basis of that same consent. You can withdraw it at any time.
For an email you type into the Substack box, the lawful basis sits with Substack as the controller, typically your consent, given when you submit the form.
For an email you send us through a direct message on Instagram or Facebook, our basis is your consent. Under PECR (the UK rules for marketing by email) we may only email you once you have actively opted in. Replying to our message with your address, after being told you will receive a short welcome series and then roughly weekly sleep stories, is that opt-in: a clear, deliberate step you take yourself, not a pre-ticked box or an assumption on our part. You can withdraw it at any time by unsubscribing or by asking us to remove you.
Who else is involved
We keep the list of providers short, and each one handles a specific job:
- Substack: provides the embedded subscribe box, holds that subscriber list, and delivers those story emails. For the subscribe-box path it is the controller, not our processor.
- Zernio: runs the comment-to-message automation on Instagram and Facebook, and holds our contact list (CRM). It processes the email you send us on our behalf.
- Sender.net: our email tool for the social-message path. It stores the address and sends the welcome-series stories on our behalf. It operates from outside the UK (see below).
- Meta (Instagram and Facebook): the platform the direct-message conversation takes place on. Meta processes those messages under its own policy.
- Google: provides the analytics (Analytics and Tag Manager).
- Cloudflare: hosts and serves the website, including the endpoint that receives your email from the social message signup. Standard server logs (including IP addresses) are kept for a short time for security and reliability (see How long data is kept).
Sending data outside the UK
Some of these providers process data outside the UK. Google and Cloudflare are based in the United States and are certified under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as providing adequate protection. Sender.net operates from outside the UK, and when the message signup is running that transfer relies on UK "adequacy" regulations where Sender.net is in a country the UK recognises, and otherwise on the UK International Data Transfer Addendum to the Standard Contractual Clauses. Each provider also has its own privacy terms.
How long data is kept
Analytics data is retained on a rolling basis (broadly up to 14 months) and then deleted.
Cloudflare's standard server logs, including IP addresses, are kept only for a short time (typically no more than a few days) for security and reliability, then deleted.
An email you type into the Substack box is held by Substack for as long as you stay subscribed. Unsubscribe at any time and Substack removes you.
An email you send us through a direct message on Instagram or Facebook is held in our contact list (Zernio) and in our email tool (Sender.net) only while you are subscribed. If you unsubscribe, or ask us to remove you, we delete it from wherever we hold it within 30 days. The message conversation itself stays in the Instagram or Facebook inbox under Meta's own retention.
Your rights
Under UK GDPR you can ask to see your data, correct it, delete it, restrict or object to how we use it, ask for a copy to take elsewhere (portability), and withdraw any consent you have given at any time, which does not affect anything we did lawfully before you withdrew.
- For an email you send us through a direct message on Instagram or Facebook, we hold that data, so email studio@princefreddie.com and we will deal with your request, including erasing your address from both Zernio and Sender.net, and confirm when it is done. The quickest way to stop the emails is still the one-click unsubscribe in any of them.
- For an email you typed into the Substack box, Substack holds it, so the quickest route is the one-click unsubscribe in any story email, or contact Substack directly.
- For the site analytics, or any question at all, email studio@princefreddie.com.
If you think something has gone wrong you can complain to the UK Information Commissioner's Office at ico.org.uk.
Children
The site and the stories are intended for adults and are not directed at children.
Changes
If this notice changes we will update this page. Last updated 24 June 2026.