verticaldrama.tv privacy policy
Updated: 1 October 2026.
This page describes what verticaldrama.tv records when you subscribe to the newsletter and when you browse the site. It does not cover Streaming Lens (lens.streaming-radar.com), which has its own page.
1. Who is responsible
- Data controller: Bostral & Co.
- Contact: [email protected].
2. Newsletter signup
When you submit the form, the server records:
| Data | Detail |
|---|---|
| Email address | Stored in lower case. |
| Language | The language of the form: fr or en. |
| Consent | The exact text of the box you ticked, and the date and time of your submission. |
| Source | A label for the page you subscribe from: home, home-hero, page, article:<article-name> or popup:<page type>. If you arrive from an invitation link (?src=), the channel (substack, contacts, linkedin or mipcom) comes first. |
| Confirmation | The SHA-256 fingerprint of the confirmation token, its expiry, the date of the last confirmation email sent, the date you confirmed, and the date of any unsubscription. The token itself is stored nowhere: it exists only in the email. |
| Contact record | If your address does not already have a record, a record with your address and language, attached to the subscribers list, so that one person can be linked to several letters. |
Your IP address is the key of the form's rate limiter, which caps the number of attempts. It is not written to your subscription record.
Consent to the newsletter is required to submit the form, and the box is unticked by default. The newsletter is published in English.
Optional Streaming Radar box
The second box, unticked by default, is optional. If you tick it, the server records an intent to subscribe to Streaming Radar (list streaming-radar, channel substack) with the text of that box. We do not send that letter: sending and confirmation stay with Substack. After you submit the form, a button opens Substack's subscribe page with your address in the link.
3. Double opt-in
- After you submit the form, an email contains a confirmation link. The link works for 48 hours.
- Opening the link subscribes nobody: the page shows a button, and your click on that button confirms.
- Without confirmation, no letter is sent. A new confirmation email for the same address is not sent within 60 minutes.
4. Unsubscribing
- Each issue of the letter carries an unsubscribe link in the email footer and a one-click unsubscribe header.
- Unsubscribing dates your subscription record and adds your address to the letter's suppression list. That list keeps the address: this is what lets us honour your refusal.
- A permanent bounce or a complaint from your mail provider also adds the address to the suppression list, for all letters.
- If you subscribe again and confirm, your unsubscription from the letter is lifted.
5. Service providers
| Provider | Role |
|---|---|
| Resend | Sending the emails: the confirmation email and the issues of the letter. |
| Supabase | Storage of subscription records, contact records and suppression lists. |
| Cloudflare | Hosting of the site and of the server that receives the form. |
| Google Analytics 4 audience measurement (section 6). | |
| Substack | Only if you tick the Streaming Radar box: sending and confirmation of that letter. |
6. Audience measurement (Google Analytics 4)
- The site loads Google Analytics 4 with Google's Consent Mode v2. By default, analytics storage is denied.
- Before you choose on the banner, no Google Analytics cookie is set, but Google's script is loaded and cookieless pings reach it.
- If you click Accept, analytics storage switches to granted and Google Analytics sets its
_gacookie. That cookie is limited to 30 days, and a new visit does not extend it. - If you click Decline, your choice is remembered and analytics storage stays denied: no cookie is set. The cookieless pings continue.
- The site sends Google Analytics navigation events: page views, scroll depth, clicks on the navigation, the footer and outbound links, display of some blocks, and, for the signup window, its display, its closing, the start of typing, the click on the button, success and validation errors. Each event carries the page path, the language, the page type and a random session identifier specific to the tab. The signup window's events contain neither your address nor what you typed.
- Measurement is linked across verticaldrama.tv, lens.streaming-radar.com and streaming-radar.com (Google Analytics cross-domain linking).
- Google Analytics keeps event and user data for 14 months.
7. What the site writes in your browser
| Key | Store | Written when, and why |
|---|---|---|
vd_consent | localStorage | When you click Accept or Decline. Value granted or declined. While it is absent, the banner is shown. |
vd_popup_closed | localStorage | When you close the signup window or subscribe. It does not come back on this browser. |
vd_popup_seen | sessionStorage | When the signup window is displayed. It does not come back on another page of the same session. |
vd_session_id | sessionStorage | When a page loads, whatever your choice on the banner. A random identifier for the tab, attached to the events of section 6. |
vd_owner | localStorage | Only if a page address contains ?vd_owner=1: this browser is then excluded from Google Analytics measurement. ?vd_owner=0 removes it. |
_ga | cookie | Set by Google Analytics after Accept (section 6). 30 days. |
To change your choice, delete the vd_consent key in your browser's storage: the banner comes back on the next page load.
8. Your rights
- You have a right of access, rectification, erasure and objection regarding your data. To exercise it, write to [email protected].
- You can withdraw your consent to the newsletter at any time with the unsubscribe link in each issue (section 4).
- You can lodge a complaint with the CNIL (the French data protection authority), cnil.fr.