Privacy policy
Last updated 30 September 2026.
MySwimLook is a swimwear magazine run by one person. This page explains in plain words what happens to your personal data when you read the site, click a link to a shop, watch a video, subscribe to our newsletter or write to us. The cookies themselves are listed in the cookie policy.
In short
- You can read MySwimLook without an account and without telling us who you are.
- We count visits with statistics that use no cookies and keep no IP addresses.
- We earn a commission on some links to shops. The software that credits those sales to us runs only if you accept marketing cookies.
- YouTube videos load only when you press play.
- When you write to us, we use your name and email only to reply, and we delete the message 24 months after our last exchange.
- If you subscribe to The Sunday Edit, we use your email only to send it, and you can unsubscribe with one click.
- We show no ads, never sell your data and do not build profiles of our readers.
Who is responsible
The data controller is Filippo Chiusano, a private individual based in Italy (Strada del Nobile 21, 10131 Torino), who publishes MySwimLook (filippo@myswimlook.com). In this policy “we” and “us” mean him. For anything about your personal data, including the requests described under “Your rights”, write to privacy@myswimlook.com.
When you read the site
Every time your browser asks for a page, the services that deliver it see your IP address, your browser, the page you asked for and the page you came from. Without this the page cannot reach you.
- Cloudflare hosts the site, routes and protects the traffic to myswimlook.com and delivers its photos and videos. It keeps technical logs for a limited time to keep the site running and secure.
- Plausible counts visits. We run it ourselves, on a server in Germany rented from Contabo. It sets no cookies and stores nothing on your device. It records the page, the site you came from, your country and region, your browser and type of device, and clicks on links that leave MySwimLook. To tell one visit from another during a day it mixes your IP address and browser with a random value that changes every 24 hours and is then thrown away: the statistics contain no IP address and no way to recognise you.
- Search runs entirely in your browser: what you type is not sent to any search provider. It does appear in the page
address (
/search/?q=…), so it reaches the hosting logs like any other address. Your recent searches are kept in your browser only, and you can clear them from the search page.
Why: to deliver the site, keep it secure and understand which stories are read. This is our legitimate interest, and it involves nothing stored on your device.
When you click a link to a shop
Our website contains some affiliate marketing links, which means we get paid commission on sales of those products or services we write about. Our editorial content is not influenced by advertisers or affiliate partnerships. We use Skimlinks and more information about their data collection is set out in their privacy policy at https://skimlinks.com/privacy-policy.
To pay us, a shop needs to know that you came from MySwimLook. Skimlinks (Skimbit Ltd, London) records visits and clicks on our pages — the page address, the page you came from, the links on the page, your approximate location worked out from your IP address and your browser — and turns a link into a tracked link when you click it. If you then buy something, the shop or its affiliate network tells Skimlinks the order value and the products, so that the commission can be paid. We never learn who you are: we only see totals per story.
- Only with your consent. The Skimlinks script runs only if you accept marketing cookies in our banner. If you refuse, the links still take you to the shop; the sale is simply not credited to us.
- Outside the European Union and the United Kingdom, if you accept, Skimlinks can also load its partner Taboola, which sets advertising cookies, including Criteo’s, used to measure and personalise advertising on other websites.
- To the extent Skimlinks processes your personal data when it provides affiliate links, Skimlinks acts as a controller of that data, under its own policy. You can also opt out of interest-based advertising at youronlinechoices.eu.
- On the shop’s website its own privacy and cookie rules apply, including those of its affiliate network. Our links let the shop see which of our pages you came from.
Why: to earn the commissions that pay for the magazine. This rests on your consent, which you can withdraw at any time from Cookie preferences at the bottom of every page.
When you watch a video
Some stories include YouTube videos. Until you press play you only see a preview image, a copy of the video’s thumbnail kept on our own image server, so your browser does not contact Google. When you press play, the video loads from YouTube’s privacy-enhanced service (youtube-nocookie.com): from then on Google receives your IP address and browser details and stores information on your device, as a controller in its own right, under Google’s privacy policy.
Why: to show you the video you asked for.
When you subscribe to The Sunday Edit
The Sunday Edit is our newsletter. To subscribe you give us your email address; we then send you an email asking you to confirm, and you are subscribed only once you click the link in it.
- We keep your email address, and the date and IP address of your confirmation: they prove that you asked for the newsletter.
- The newsletter is sent by Brevo, in France, which keeps the list for us on servers in the European Union.
- We do not track who opens our emails or clicks their links: Brevo counts them only as anonymous totals.
- Every email has a link to unsubscribe with one click. To have your address deleted completely, write to privacy@myswimlook.com.
- After you unsubscribe we keep your address for 24 months as proof of your consent, then delete it.
- The sign-up form uses Cloudflare Turnstile against spam, as the contact forms do.
Why: you asked for it (your consent).
When you write to us
The contact and collaboration forms ask for your name, your email address and your message. All three are needed: we cannot reply without them. The same applies when you email us directly.
- Form messages are delivered to our mailbox, which runs on Proton, by Brevo (France, servers in the European Union), the service that also sends our newsletter. The message never joins the newsletter list.
- To keep out spam, the forms use Cloudflare Turnstile, which loads only when you start filling in a form. It checks signals from your browser, stores a small item in it and receives your IP address when you send the message.
- We use your details only to reply and to carry on the conversation you started. We delete messages 24 months after our last exchange, unless we need them for longer to establish or defend a legal claim.
Why: to answer you, as you asked us to, and to protect the forms from abuse (our legitimate interest).
When you choose about cookies
The cookie banner is run by CookieHub (CookieHub ehf, Iceland). It stores your choice in a cookie on your device for 365 days and keeps a record of it for up to 12 months, because we must be able to show that consent was given. You can change your choice at any time from Cookie preferences at the bottom of every page.
Why: the law requires us to be able to prove consent.
At a glance
| What | Legal basis | How long |
|---|---|---|
| Delivering and protecting the site (Cloudflare) | Legitimate interest | Technical logs, for the limited time set by each provider |
| Visit statistics (Plausible) | Legitimate interest | No personal data kept; the daily value is discarded after 24 hours |
| Affiliate links (Skimlinks; outside the EU and UK also Taboola and Criteo) | Consent | Skimlinks: up to 3 years, anonymised, under its own policy |
| Videos (YouTube) | Your request | Under Google’s policy |
| Messages (forms and email) | Your request | 24 months after our last exchange |
| Newsletter (Brevo) | Consent | Until you unsubscribe, then 24 months as proof of consent |
| Spam protection (Cloudflare Turnstile) | Legitimate interest | Under Cloudflare’s policy |
| Record of your cookie choice (CookieHub) | Legal obligation | 365 days on your device; record up to 12 months |
The legal bases are those of Article 6(1) of the General Data Protection Regulation (GDPR): (a) consent, (b) steps you ask us to take, (c) a legal obligation and (f) legitimate interest. We make no automated decisions about you.
Who else receives data
Services that work on our behalf, under data processing terms:
- Cloudflare, Inc. — hosting, traffic routing, protection, photo and video delivery, and spam checks — United States
- Contabo GmbH — the server that runs our statistics — Germany
- Proton AG — our mailbox — Switzerland
- Brevo — the newsletter and the delivery of form messages — France
- CookieHub ehf — cookie banner and consent record — Iceland
Companies that decide for themselves how they use the data they receive:
- Skimbit Ltd (Skimlinks) — affiliate links, only with your consent — United Kingdom
- Taboola and Criteo — advertising cookies, only outside the EU and UK and only with your consent
- Google (YouTube) — only when you play a video
- The shops and affiliate networks you reach through our links
We will also disclose data when the law requires us to.
Data outside Europe
Some of these companies are based, or keep servers, outside the European Economic Area. The European Commission recognises that Switzerland, the United Kingdom and Israel protect personal data adequately. The companies in the United States take part in the EU-U.S. Data Privacy Framework or use the standard contractual clauses approved by the European Commission.
Your rights
You can ask us at any time to:
- tell you which personal data we hold about you and give you a copy;
- correct it;
- delete it;
- limit what we do with it;
- give it to you in a reusable format;
- stop using it, where we rely on our legitimate interest;
- withdraw your consent, without affecting what happened before — for cookies, from Cookie preferences.
Write to privacy@myswimlook.com. We reply within one month and may ask you to confirm who you are before acting on a request. If you think we have handled your data wrongly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority of the country where you live or work.
Readers outside the European Union
The same rules apply wherever you read from: marketing tools run only after you accept them, and you can always say no. We do not sell personal information. If your browser sends a Global Privacy Control signal, we treat it as a refusal of marketing cookies. In the United States you can also opt out of interest-based advertising at aboutads.info/choices and networkadvertising.org/choices.
Children
MySwimLook is not meant for children under 14, and we do not knowingly collect their data. If you think a child has sent us personal data, write to us and we will delete it.
Changes
Before we add any other service that handles your data, this page will describe it. When the policy changes, the date at the top changes too.