Privacy Policy

Last Updated · September 22, 2026

Your privacy matters to us. A few principles guide this policy:

• We collect as little personal information as we can.
• We keep it only as long as we have a reason to.
• We use as few cookies as possible.
• We don’t sell your data, ever.
• We aim to be fully transparent about what we gather and why.

Below is the full version, which puts these principles into practice — including the analytics and advertising measurement tools we use and the cookies that come with them. A cookie-by-cookie list, with vendors and lifetimes, is in our Cookie Policy.

SilentRoom Inc. (“SilentRoom,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit SilentRoom Journal at silentroom.media (the “Journal”).

By using the Journal, you agree to the practices described below.

1. Who We Are

SilentRoom Inc. is a Delaware corporation. Its registered address — the registered office used for legal notices, not an editorial office — is 8 The Green, Suite B, Dover, DE 19901, USA. Our editorial team works remotely from Europe. For any privacy-related question, contact us at support@silentroom.media or call +1 (302) 397-3281 (Mon–Fri, 10:00–18:00 CET / 04:00–12:00 ET).

For users in the European Economic Area (EEA) and the United Kingdom, SilentRoom Inc. acts as the data controller of personal data processed in connection with the Journal.

2. Information We Collect

2.1 Information You Provide Directly

• Email address: when you subscribe to our newsletter, we collect the email address you provide.
• Communications: the content of any messages you send us (email, feedback forms).

2.2 Analytics, Advertising, and Session-Recording Tools

The tools below run on the Journal. None of them load, and none of them set or read cookies, until you click Accept in our cookie banner. Until then, only Plausible (cookieless) runs. If you click Decline, or never make a choice, they do not load at all.

Plausible Analytics is a privacy-focused analytics service that does not use cookies and does not collect personal data. Plausible collects aggregated, non-personal information such as page views, referral sources, browser type, operating system, device type, and country-level location. No individual visitor can be identified from this data. Plausible processes data in the European Union and runs regardless of your cookie choice.

Google Analytics 4 (GA4), provided by Google LLC, uses cookies to help us understand how visitors use the Journal and to measure the performance of our marketing campaigns. GA4 collects pages viewed, referral source, browser and device type, approximate (city- or country-level) location, and a randomly generated identifier assigned to your browser. GA4 does not log or store your IP address: Google uses it transiently at the moment of collection to derive approximate location and then discards it. Google may process this data in the United States.

Google Ads conversion measurement, provided by Google LLC, helps us understand whether visitors who arrive at the Journal from our advertising campaigns take actions such as subscribing to the newsletter. It uses cookies and click identifiers (parameters appended to campaign URLs) that link an ad click to a subsequent action on the Journal.

Meta Pixel, provided by Meta Platforms, Inc., measures whether visitors who saw or clicked our ads on Facebook and Instagram reached the Journal and what they did here, using a browser identifier cookie. Meta may match that identifier with a Meta account if you are logged in to one.

X (Twitter) conversion tag, provided by X Corp., measures the results of our campaigns on X using browser identifier cookies.

LinkedIn Insight Tag, provided by LinkedIn Corporation, measures the results of our campaigns on LinkedIn and provides aggregate demographic reporting about visitors; it uses cookies set on LinkedIn’s own domain.

Reddit Pixel, provided by Reddit, Inc., measures the results of our campaigns on Reddit using a browser identifier cookie.

Microsoft Clarity, provided by Microsoft Corporation, records on-page interactions — mouse movement, clicks, scrolling, and typing in non-sensitive fields — and builds heatmaps and session replays that we use to understand how readers use the Journal’s pages. Clarity masks the content of form fields and uses cookies to distinguish sessions and visitors. Microsoft may also use data collected through Clarity to improve its own services, as described in Microsoft’s privacy statement.

Google Tag Manager (GTM) is the tool that loads the tags above. It does not itself collect personal data or set analytics or advertising cookies. On the Journal, the GTM container is not loaded at all until you click Accept.

Consent Mode. We implement Google Consent Mode v2 with all consent signals set to denied by default for every visitor, in every region. Your choice in our cookie banner is passed to Google tags as a consent signal; because the tags are not loaded before Accept, a denied default means no Google tag runs.

2.3 Server Log Data

Our hosting infrastructure automatically records standard server log data, which may include IP address, browser type, referring page, pages requested, and timestamp. Server logs are used for security monitoring and troubleshooting and are not combined with other data sources to identify individual visitors.

We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us personal data, contact us and we will delete it.

3. How We Use Your Information

We use personal data for the following purposes:

• To deliver the newsletter: send articles, updates, and editorial content to subscribers who have opted in.
• To improve the Journal: understand readership patterns in aggregate, identify popular content, and improve the reader experience.
• To measure marketing: understand which campaigns and referral sources bring readers to the Journal, and whether our advertising leads to newsletter subscriptions or other actions, using consent-based analytics and conversion measurement.
• To communicate with you: respond to messages or inquiries you send us.
• To comply with legal obligations: including applicable consumer protection and anti-spam laws.

4. Legal Basis for Processing (GDPR / UK GDPR)

If you are in the EEA or the UK, we rely on the following legal bases under Article 6 GDPR:

For US residents, we process personal data as described in this Policy and in accordance with applicable US federal and state privacy laws (see Section 9).

5. How We Share Your Information

We do not sell your personal information. We share data only with the following categories of recipients:

• Email platform provider: we use a third-party email newsletter platform to store our subscriber list and deliver newsletters on our behalf. Our provider acts as our processor, handles subscriber data only on our instructions, and is contractually bound to maintain appropriate data-protection safeguards.
• Hosting and infrastructure providers: for operating the Journal and serving content.
• Analytics providers: Plausible Analytics, which processes only aggregated, non-personal data (no personal data is shared with or stored by Plausible); and Google LLC, which processes usage and cookie data on our behalf to provide analytics (Google Analytics 4).
• Advertising networks (only after you click Accept): Google LLC (Google Ads conversion measurement), Meta Platforms, Inc. (Meta Pixel), X Corp. (X conversion tag), LinkedIn Corporation (LinkedIn Insight Tag), and Reddit, Inc. (Reddit Pixel). Each receives the identifier its tag sets on your browser, the pages you visit on the Journal, and the actions it is configured to measure, and may combine that with an account you hold with it. These networks act as independent controllers for their own use of the data; their privacy policies apply to that use.
• Session-recording provider (only after you click Accept): Microsoft Corporation (Microsoft Clarity), which processes on-page interaction recordings and heatmap data.
• Professional advisors: lawyers, accountants, and auditors bound by confidentiality obligations, if needed.
• Authorities: when required by law, court order, or to protect our rights, users, or the public.
• Successors: in connection with a merger, acquisition, or sale of assets, subject to the protections of this Policy.

All processors are contractually required to handle personal data only on our instructions and to maintain appropriate safeguards.

6. International Data Transfers

We are based in the United States. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards, including:

• Adequacy decisions issued by the European Commission or UK government, where applicable, including the EU-US Data Privacy Framework, under which Google LLC is certified; and
• Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional technical and organizational measures where required, for providers not covered by an adequacy decision or certification.

You may request a copy of the relevant safeguards by emailing support@silentroom.media.

7. Cookies and Tracking Technologies

The Journal uses cookies as described below. The full list — each cookie’s name, vendor, purpose, and lifetime — is in our Cookie Policy.

Strictly necessary. One first-party cookie, sr_consent, records your cookie choice (Accept or Decline) for 12 months. It is set without consent, as the law allows, so that we can honor your choice on later visits.

Plausible Analytics operates without cookies and collects no personal data.

Analytics, advertising, and session-recording cookies are set by the tools listed in Section 2.2 — Google Analytics 4, Google Ads, Meta Pixel, X conversion tag, LinkedIn Insight Tag, Reddit Pixel, and Microsoft Clarity — and only after you click Accept. Before that, the tag container that loads these tools is not loaded, so none of them can set or read a cookie or store an identifier on your device.

What Decline does. If you click Decline in the banner, or later withdraw consent through the Cookie settings control in the footer: (1) the tag container is not loaded on any subsequent page; (2) analytics and advertising cookies that these tools set on the silentroom.media domain during an earlier Accept are deleted from your browser immediately; and (3) if the tools were running on the current page, the page reloads without them. Cookies that these vendors set on their own domains (for example clarity.ms, facebook.com, linkedin.com, doubleclick.net) are outside our control: we cannot delete them, and you can remove them through your browser’s cookie settings.

Advertising measurement, not cross-site profiling by us. We use the advertising tags to measure our own campaigns — whether a visitor who clicked one of our ads reached the Journal and, for example, subscribed. We do not sell the data, and we do not build advertising audiences for third parties. The networks named in Section 5 receive the data their tags collect and may use it under their own policies, including to match it with an account you hold with them.

You can change or withdraw your consent at any time via the Cookie settings control in the footer of every page. You can also set your browser to reject cookies or block tracking pixels in your email client; some parts of the Journal may work less smoothly if you do.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy:

• Newsletter subscriber data (email address): retained for as long as your subscription is active. When you unsubscribe, we stop sending you newsletters immediately, and your email address is moved to a suppression list maintained solely to ensure we honor your opt-out and do not contact you again. It is not used for any other purpose. You may request full erasure of your email address at any time by contacting support@silentroom.media, subject to our legal obligations.
• Server log data: retained for up to 90 days for security and troubleshooting purposes, then deleted.
• Plausible analytics data: aggregated, non-personal statistics only; no personal data is stored.
• Google Analytics data: retained according to our configured retention period (up to 14 months), then deleted or anonymized.
• Google Ads conversion data: click identifiers and conversion cookies expire within the periods listed in the Cookie Policy; Google retains conversion reporting in aggregated form.
• Meta, X, LinkedIn, and Reddit measurement data: cookies expire within the periods listed in the Cookie Policy; each network retains campaign reporting under its own policy.
• Microsoft Clarity recordings and heatmaps: retained by Microsoft for up to 30 days for session replays and up to 13 months for aggregated heatmap data, per Microsoft’s retention terms.
• Communications: retained for a reasonable period to handle ongoing inquiries, then deleted.

When personal data is no longer needed, we delete or anonymize it.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete personal data, subject to legal retention obligations.
• Restriction: ask us to limit how we process your data.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Portability: receive your data in a structured, machine-readable format.
• Withdraw consent: where processing is based on consent (including newsletter subscription, analytics cookies, and advertising conversion measurement), withdraw it at any time.
• Complain: lodge a complaint with your local data protection authority.

You can opt out of Google Analytics and Google Ads conversion measurement at any time by declining or withdrawing consent through our cookie banner.

US residents: several US states, including California, Virginia, Colorado, Connecticut, Texas, and others, grant residents specific privacy rights, such as the right to know what personal information we collect, request its deletion or correction, and opt out of any “sale” or “sharing” of personal information. We do not sell personal information. We will not discriminate against you for exercising your rights under any applicable state privacy law.

For California residents (CCPA/CPRA): in the past 12 months, we have collected the following categories of personal information, depending on how you use the Journal:

• Identifiers — such as your email address (if you subscribe), IP address (in server logs), and cookie-based identifiers.
• Internet or other electronic network activity — such as page views, how you interact with the Journal, and whether you arrived from one of our advertising campaigns.
• Geolocation data — approximate, city- or country-level location.

We collect this information from you directly and automatically through operation of the Journal, and we use it for the purposes described in Section 3. Our advertising measurement is configured to evaluate our own campaigns only. We do not sell personal information or share it for cross-context behavioral advertising.

To exercise any of these rights, contact us at support@silentroom.media. We will respond within the timeframe required by applicable law (generally 30 days under GDPR, 45 days under US state privacy laws).

10. Newsletter and Email Communications

We send newsletter emails only to subscribers who have provided their email address and opted in. Every newsletter email includes an unsubscribe link. You can opt out at any time by clicking the unsubscribe link in any email or by contacting us at support@silentroom.media.

In compliance with the CAN-SPAM Act, all our emails include a clear identification of the sender (SilentRoom Inc.), a valid physical postal address, and a working unsubscribe mechanism. Unsubscribe requests are honored within 10 business days.

In compliance with GDPR, we will not add you to our mailing list without your affirmative consent. We do not use pre-checked boxes or treat inactivity as consent.

11. Data Security

We implement reasonable technical and organizational measures to protect personal data, including encryption in transit (TLS) and restricted access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

If we become aware of a personal data breach that is likely to affect you, we will notify you and the relevant authorities as required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent changes. Material changes will be communicated by email to newsletter subscribers or by a prominent notice on the Journal. Continued use of the Journal after the effective date constitutes acceptance of the updated Policy.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Delaware, USA, without regard to its conflict of law principles. Mandatory data-protection and consumer laws of your country of residence (including the GDPR and UK GDPR where applicable) remain unaffected.

14. Contact Us

Questions, requests, or complaints regarding this Privacy Policy can be sent to:

SilentRoom Inc.
Registered address: 8 The Green, Suite B, Dover, DE 19901, USA
support@silentroom.media · +1 (302) 397-3281 · Mon–Fri, 10:00–18:00 CET (04:00–12:00 ET)