Privacy & Cookie Policy

Last updated: 21 June 2026

This page explains what personal data the2040model.com collects, why, the cookies it uses, and the rights you have under the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive.

1. Who is responsible

This website is operated in connection with 2040 — The Model, a novel by Mila Agius. For any privacy request or question about your data, contact us at press@the2040model.com. We act as the data controller for the processing described below.

2. What we collect and why

We keep data collection to the minimum needed to run the site and tell you when the book launches:

Analytics data — if you consent, Google Analytics 4 collects information about how you use the site (pages viewed, approximate location from a truncated IP address, device and browser type, referring source, and on-page interactions). This is used only in aggregate to understand and improve the site. It is not used to identify you personally and is never sold.
Email address — if you sign up for launch notifications, we store the email address you provide so we can send you updates about the book and the crowdfunding campaign. You can unsubscribe at any time using the link in every email.

3. Legal basis

Both analytics and the launch newsletter rely on your consent (Article 6(1)(a) GDPR, and §5(3) of the ePrivacy Directive for storing cookies). No analytics cookies are set until you accept them in the cookie banner, and no marketing email is sent unless you ask for it. You may withdraw consent at any time (see section 7).

4. Cookies

The site sets no cookies until you choose Accept in the cookie banner. If you accept, the following cookies are set by Google Analytics:

Cookie	Set by	Purpose	Retention
_ga	Google Analytics	Distinguishes unique visitors	2 years
_ga_<id>	Google Analytics	Maintains session state	2 years
cookie-consent	this site	Remembers your cookie choice (stored locally in your browser, not sent to any server)	Until you clear it

We use Google Consent Mode v2: until you consent, analytics and advertising storage are set to denied, so no analytics cookies are placed. We do not run advertising and never enable advertising-related storage.

5. Service providers and international transfers

We use the following processors, who may process data on servers outside the European Economic Area (notably the United States):

Google Ireland Ltd / Google LLC — Google Analytics 4. See Google's privacy policy.
Kit (formerly ConvertKit) — email list and delivery for launch notifications. See Kit's privacy policy.

Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

6. How long we keep data

Analytics data is retained in Google Analytics for the period configured for the property (up to 14 months) and then aggregated. Your email address is kept until you unsubscribe or ask us to delete it.

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw that consent at any time — this does not affect processing done before withdrawal.

Withdraw cookie consent: clear this site's data in your browser (or your browser cookies); the cookie banner will appear again and you can choose differently.
Unsubscribe from emails: use the unsubscribe link in any email, or write to us.
Exercise any other right: email press@the2040model.com.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been handled unlawfully.

8. Changes to this policy

We may update this policy from time to time. The current version is always available at this address, with the revision date shown above.