What this site collects

Your email address, if you give it. A server log, like every site has. A cookie that remembers how you arrived. This page says what happens to both, and what would have to change here before anything else was added.

The short version

The only thing this site asks you for is an email address, and only if you decide to type it into the signup form. If you do, the page you signed up on and the site that sent you there are recorded with your address, so I can tell which places bring readers. Beyond that, nothing you read here is tied to you, nothing about you is sold or shared, and you can have everything removed by asking.

The weekly email

The signup form on this site is provided by beehiiv, which runs the mailing list and sends the issues. When you use it, your email address goes to beehiiv rather than to a database here, and beehiiv acts as the processor for it.

No name is asked for and none is stored. Your address is used for one thing, which is sending you the weekly issue.

Alongside it, beehiiv keeps a note of how you found the site: the page you signed up on, the site you came from (a search engine, Reddit, LinkedIn, another newsletter), and any campaign tag that was on the link you followed. That is used only to count which places bring readers, never to contact you or build a profile of you.

Signing up takes two steps on purpose. You enter your address, then beehiiv emails you a link to confirm it. Nothing is sent until you click that link, which means a mistyped address never receives anything and nobody can be signed up by somebody else.

Your address is kept until you ask for it to be removed. It is never sold, rented, or used to find you anywhere else.

Every issue carries an unsubscribe link. You can also email hello@nervoussystemregulation.org and ask to be removed. No reason is needed and none will be asked for.

Server logs

Like every website, this one is served by a hosting provider that records incoming requests. Those records include your IP address, the page requested, the time, and your browser's user-agent string. IP addresses count as personal data under the GDPR, which is why this section exists.

• Why: to serve pages and to defend against abuse. Legal basis: legitimate interest in operating and securing the site.
• Who holds it: the hosting provider, acting as a data processor. Provider: Vercel Log retention: 1 hour (Vercel Hobby plan)
• What is done with it: nothing. These logs are not read, exported, or combined with anything else.

What else is on the page

This section is the honest one, and it is kept current rather than aspirational. As of today:

• The beehiiv signup form. This is the one thing on the site loaded from somewhere else. Its code comes from subscribe-forms.beehiiv.com, and it can see the address of the page it sits on, the site you came from, and whatever you type into it. It is on every page, because the signup block is.
• One cookie, set by the form. beehiiv's form code sets a cookie called bhv_attribution on this site when you arrive from another site or through a tagged link. It holds where you came from, any campaign tag on the link, and the page you landed on, and it expires after 30 days. It exists so that a signup can be credited to how you arrived, and it is only read if you sign up. The form can also set a cookie to remember that you closed it, if it is ever shown as something you can close.
• No analytics. Visitor numbers are not measured at the moment.
• Fonts are served from this domain rather than from a font service.

Some of the rest will probably change. A site that nobody can measure is a site written into the dark, and this one may eventually need to pay for itself. If analytics or advertising is added, this list is updated on the day it happens, naming what was added and what it can see. Anything that needs your consent will ask for it first.

What will not change: your email address is not sold or shared, and nothing you read on this site is attached to your name.

Links to other sites

Every study card links to the paper it describes, because being able to check a claim is the point. Those are separate organisations with their own privacy practices, and following a link takes you into their hands rather than mine.

Your rights

Under the GDPR you can ask for access to any personal data held about you, correction, erasure, restriction of processing, or you can object to processing. In practice there are two things to ask about: a server log nobody reads, and your address if you gave it. Either can be handed over or deleted on request, at hello@nervoussystemregulation.org.

You also have the right to complain to a supervisory authority. In Spain that is the Agencia Española de Protección de Datos.

Who is responsible

This site is written and run by Eduard Arnau. Contact: hello@nervoussystemregulation.org.

Effective 2026-08-07. If this policy changes in a way that matters, the change is noted on this page, dated, rather than made quietly.

Changed 24 September 2026: this page used to say the site set no cookies. The signup form's code sets one, bhv_attribution, described above, and records how a subscriber found the site. Both are now listed.