Privacy Notice
Last updated: 7 August 2026 · Applies to echonestpro.pro
This Privacy Notice explains how Mira ("I", "me") handles personal data when you visit Echo Nest — a personal blog hosted at echonestpro.pro. I am the data controller for this site. There is no company behind the blog; contact details are listed on the Write page.
1. What this site is
Echo Nest is a static personal website. I publish first-person logs about daily life in Yishun. I do not sell products, run paid subscriptions, or operate as a business entity. Personal data processing is limited to what is needed to operate the site, respond to reader messages, and comply with Singapore law including the Personal Data Protection Act 2012 (PDPA).
2. Data I collect
2.1 Contact form
When you submit the Write form, I collect your name, email address, subject selection and message text. I process this data only to read and reply to your note. Legal basis: your consent (checkbox) and my legitimate interest in maintaining correspondence with readers.
2.2 Server logs
The hosting provider may automatically record IP address, browser type, request time and pages visited. I do not merge these logs with contact form data unless required for security investigation.
2.3 Cookies and local storage
See the Cookie Notice for details on essential cookies, optional analytics and Google Maps embeds present on every content page.
3. Google Maps embeds
Each page includes a neighbourhood-scale Google Maps iframe. Google may set cookies or collect usage data according to its own policies. I do not control Google's processing. Primary disclosure lives on cookies.php.
4. How I use data
- Respond to messages you send via the contact form
- Maintain site security and diagnose technical faults
- Improve readability and fix errors when readers report them
I do not use your data for automated profiling, advertising networks or resale.
4A. Purpose limitation
Personal data collected through Echo Nest is used only for the purposes described in this notice. I do not repurpose reader emails for newsletters unless you explicitly ask to receive future updates, which is not offered by default. Server logs are reviewed only when investigating broken pages, spam attempts or suspected abuse of the contact form. I do not build reader profiles, score engagement, or merge contact data with social media accounts because no such accounts are linked to this site.
4B. Accuracy and corrections
If you believe I hold inaccurate information about you — for example a misspelled name in an email thread — write to me and I will correct or delete the relevant message chain. Blog posts themselves are editorial content rather than personal data about readers, but factual corrections about how you are referenced (if ever) will be handled promptly.
4C. Do Not Track
Some browsers send a Do Not Track (DNT) signal. Echo Nest does not respond with a special DNT mechanism because the site does not operate cross-site tracking. Optional analytics, when enabled by your cookie choice, remain first-party in intent and minimal in scope. Rejecting analytics in the banner is sufficient to avoid optional measurement.
4D. Links to other sites
Occasionally I may link to external resources such as Google policies or public map tiles. Those sites operate under their own privacy terms. I do not control and am not responsible for their practices. When you follow an external link, you leave echonestpro.pro and should review the destination site's notice.
4E. Data breach notification
If a breach affecting personal data occurs on infrastructure I control, I will assess scope under PDPA guidance and notify affected individuals and the Personal Data Protection Commission when required. Given the limited data categories here (mostly name, email and message text), impact is expected to be low, but the commitment stands regardless of scale.
5. Retention
Contact form emails are kept until the conversation ends, then archived or deleted within twelve months unless legal retention applies. Server logs follow the host's rotation schedule, typically under ninety days. Cookie preferences stored in your browser expire after six months unless you clear them sooner.
5A. Detailed retention schedule
Active correspondence: retained while the thread remains useful for reply context. Dormant threads: reviewed annually; deleted if no contact for twelve months. Spam filtered by honeypot: not stored. Rate-limit counters: hourly temporary files on server, not tied to identity long term. Backups: hosting provider may retain deleted emails in encrypted backups for a short window; I request deletion cycles consistent with industry practice.
5B. Anonymisation
When sharing aggregate feedback internally (for example "a reader reported a broken link on log-03"), I remove names and email addresses unless the reader explicitly wants attribution. Aggregated statistics, if ever used, contain no identifiable fields.
6. Sharing
I do not sell personal data. I may share data with:
- Email delivery infrastructure when you contact me
- Hosting provider for operational logs
- Authorities if required by valid Singapore law
7. International transfers
Hosting and email routing may involve servers outside Singapore. Where this occurs I rely on contractual safeguards offered by providers or your explicit consent for form submissions.
8. Your PDPA rights
You may request access, correction or withdrawal of consent for contact data by emailing [email protected]. I will respond within thirty days where feasible. Withdrawal does not affect prior lawful processing.
8A. How to exercise rights
Send a clear subject line such as "PDPA request" with enough detail for me to locate your message thread. I may ask verifying questions to prevent disclosure to the wrong person. Access requests receive a summary of stored fields. Correction requests update the relevant email archive. Withdrawal of consent stops future processing but may mean I cannot reply until you provide fresh consent.
8B. Complaints
If you remain dissatisfied after contacting me, you may lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore. I hope issues can be resolved directly first — most reader queries are simple corrections or deletion requests handled within a few days.
8C. Language
This notice is written in English (Singapore). If you require clarification in another language, email me and I will try to assist, though the authoritative version remains the English text on this page.
9. Security
I use HTTPS, honeypot spam filtering and rate limits on the contact form. No method is perfectly secure; please avoid sending sensitive identifiers unnecessarily.
10. Children
This blog is written for general readers and is not directed at children under thirteen. I do not knowingly collect children's data.
11. Changes
I may update this notice when practices change. The last updated date appears at the top. Material changes will be noted on the Write page for thirty days.
12. Contact
Mira · Blk 712 Yishun Street 71, #08-06, Singapore 760712 · +65 6741 3826 · [email protected]
Personal blog · views are my own · not professional advice.