This Privacy Policy describes how this website collects, uses, and protects your personal data in accordance with the UK GDPR, and the Data Protection Act 2018.
Last updated: 20 June, 2026.
Website Details
Gralhix.com is a personal blog website created and maintained solely by Sofia Santos.
No other person or AI tools have access to its backend.
What personal data this website collects and why
Website subscriptions:
If you chose to subscribe to the website you voluntarily provide your email address. No subscription is needed to access the contents or navigate the website, only if you wish to be notified of new posts.
Email addresses are used for the purpose of sending email notifications when new posts are published on the website. This feature is managed through Jetpack plugin. Your email address is not sold or used for advertising purposes. Subscriber information if kept until the user unsubscribes.
Legal basis: Consent.
You may unsubscribe at any time using the link provided in every email.
Analytics:
This website uses Jetpack Stats which collects information about how the website is used, and provides basic visitor statistics.
Through the plugin dashboard I can see information such as:
- The number of visitors and page views per day
- Which pages were visited each day
- Which websites referred visitors to this website
- Approximate visitor locations by country.
I cannot see which specific visitor viewed a particular page, nor can I identify visitors through the statistics provided to me. The statistics are used solely to understand how the website is being used and to improve its content.
Legal basis: Legitimate interest (Article 6(1)(f) UK GDPR)
Embedded content from other websites
Some pages and posts on this website feature embedded content such as videos (e.g. YouTube) or social media posts (e.g. Twitter/X). Embedded content from other websites behaves in the same way as if you visited those websites directly.
These third-party websites may:
- Collect data about you.
- Use cookies.
- Track your interaction with the embedded content.
The above are outside the control of this website. Please refer to the respective privacy policies of those third-party services for more information.
Who does this website share your data with
Your personal data is not sold, traded or rented.
This website only shares your information with third parties as outlines in this Private Policy page, nothing else. If you choose to submit your email address, your data may be processed by the Newsletter plugin provider to send newsletters when new content is published on the website.
This website is hosted by WordPress, and as such, personal data (such as IP addresses) is processed automatically as part of delivering web pages and maintaining the security and reliability of the site. This data is also not used for marketing purposes.
Backup and data storage
This website uses a backup plugin named UpdraftPlus to create periodic backups of the content for security and recovery purposes.
Backups may contain personal data that exist on the website, such as email addresses voluntarily provided by users when subscribing to the newsletter.
These backups are stored off-site on Dropbox, a cloud storage service. Dropbox processes the data solely for the purpose of providing secure storage. Access to backup data is restricted to the site administrator (Sofia Santos). According to UpdraftPlus’ privacy policy, no backup data or website content is transmitted to their servers.
Backup data is not used for any other purposes and is not accessed unless required for maintenance, recovery, or troubleshooting.
Changes to this policy
This Privacy Policy page may be updated from time to time to ensure its details are up to date. On such occasions, the date at the top right will indicate when the page was last edited.