Privacy Notice

Last updated: 4 July 2026

Who we are

Stop Israel Bonds is a campaign run by volunteers from Luxembourg civil society. We are the data controller for the processing described below. Contact us about anything on this page, including your data rights, at stopisraelbonds@gmail.com.

The “email your regulator” form

The form runs entirely in your browser. When you press send, the message opens in your own email app and is sent by you, from your address, to the regulators. It does not pass through us or any server of ours.

The prepared draft blind-copies (Bcc) your email to us at stopisraelbonds@gmail.com, so we can see how the action is going and how many messages regulators receive. That copy contains your name, email address, country and message; we rely on our legitimate interest in running and measuring the campaign (Art. 6(1)(f) GDPR). The Bcc is visible in your draft before you send — delete it if you prefer we receive nothing, and your message still reaches the regulators unchanged.

The petition (optional)

If you also tick “Add my name to the public petition”, the blind copy is marked “+petition”. Because supporting this campaign can reveal your political opinions, we count you as a signatory only with your explicit consent (Art. 6(1)(a) and 9(2)(a) GDPR) — the tick is that consent.

• What we do with it: count you as a petition signatory. Your name may be published as part of the petition; your email address and message are never published.
• Where it lives: a Gmail inbox, so it is processed by Google under the EU–US Data Privacy Framework.
• How long: we delete the blind copies — petition or not — no later than six months after the campaign ends.
• Withdrawing: email us and we will delete your signature — no questions, no deadline.

Analytics

We use Simple Analytics (EU-based): no cookies, no fingerprinting, no personal data stored. It gives us aggregate page counts only.

Hosting

The site is hosted on GitHub Pages. Like any web server, GitHub briefly processes your IP address in its server logs to deliver the page (see GitHub's privacy statement). Fonts are served from this site — no third-party font requests.

Cookies

None.

Your rights

You can ask us for access to, correction of, or deletion of your data, and withdraw consent at any time (Arts. 15–17, 7(3) GDPR) — email stopisraelbonds@gmail.com. You can also complain to the Luxembourg data protection authority, the CNPD.