Privacy Policy

How we handle your personal data — in plain English.

Who we are

Kronor & Beyond (kronorandbeyond.com) is a personal finance blog for English-speaking expats living in Sweden. For privacy-related questions, contact us at hej@kronorandbeyond.com.

What data we collect and why

Visitors (no account required)

When you browse this site, we collect:

• Affiliate click data — when you click an affiliate link, we log the affiliate program, the page you came from, your device type, browser, and IP address. See "Cookies" below for exactly what this involves and why it isn't gated by the cookie banner.

Email subscribers

If you sign up for our email list, we collect your email address. We use this to send you the Sweden Arrival Checklist and follow-up guides about expat personal finance in Sweden. We use MailerLite to manage our email list.

• You can unsubscribe at any time using the link at the bottom of any email.
• We do not sell or share your email address with third parties.
• MailerLite's privacy policy: mailerlite.com/legal/privacy-policy

Emails you send us

If you email us (for example at hej@kronorandbeyond.com), an automated process reads the message, checks it against our own published guides, and prepares a suggested reply as a private draft in our inbox — it never sends anything on its own. Rogério reviews and personally sends every reply.

• Preparing that draft means sending the text of your email to Anthropic, the company behind the Claude models, so it can identify which of our published guides (if any) answers your question.
• By default, Anthropic does not use API inputs or outputs like this to train its models — that only happens if a customer explicitly opts in, which we haven't. See Anthropic's privacy policy for the current statement of that policy.
• This process only ever drafts a reply to the message you sent us — it does not email anyone else, and nothing it drafts is sent without Rogério reading and sending it first.
• Anthropic's privacy policy: anthropic.com/legal/privacy

Cookies

This site sets almost nothing on its own — the only thing kronorandbeyond.com itself stores in your browser is a record of your cookie choice (in your browser's local storage, not a cookie). Everything else below either loads regardless of that choice, or is set by someone else's domain, not ours.

Controlled by the cookie banner

• Newsletter signup form (MailerLite) — on the Free Checklist page only. The form and its script load only after you click Accept. If you decline or haven't chosen yet, you'll see a short note instead of the form, with a link back to this choice.

Not controlled by the cookie banner — active regardless of your choice

• Google Fonts — every page on this site loads two typefaces directly from Google (fonts.googleapis.com). This sends your IP address to Google on every page load. It is not a cookie, and your cookie choice here does not affect it.
• Affiliate click log — when you click a link that starts with /go/, our server logs the click before redirecting you. We record: the affiliate name, your browser's user-agent string, a coarse device type (mobile/tablet/desktop), your IP address, the destination URL, the tracking ID in the link, the page you came from, and the time. This is server-side logging, not a cookie in your browser, and happens whether or not you've accepted anything.
• The affiliate network's own cookie — once you land on the affiliate's own website (after the redirect above), that company may set its own cookie on its own domain to record the referral so we get credit. We do not set this cookie, and it is not something our cookie banner can control — it belongs entirely to the affiliate network's site, not ours.

In short: the cookie banner controls the newsletter signup form and nothing else. It does not gate font loading or the affiliate click log.

Lawful basis and retention for the affiliate click log

We process the click log above under legitimate interest — attributing referrals correctly to earn commission, and detecting fraudulent or abusive click patterns. We retain it for 24 months, after which it is deleted.

You can withdraw consent for the newsletter signup form at any time using the "Cookie settings" link in the footer.

Affiliate networks we work with

When you click an affiliate link on this site and land on the affiliate's own website, you may be tracked by one or more of the following networks: Awin, Adtraction, Tradedoubler, Impact, CJ Affiliate, FlexOffers. Each network sets its own cookies on its own domain and has its own privacy policy governing how they handle tracking data.

Third-party services

• Google Fonts — loads two typefaces on every page from Google's servers, which receives your IP address on every visit. Not consent-gated. Google's privacy policy.
• Airtable — receives the affiliate click log described above (affiliate name, browser, device type, IP address, destination URL, tracking ID, referrer, timestamp) every time you click a /go/ link. Airtable's privacy policy.
• Contentful — our content management system. Does not process visitor personal data.
• Vercel — our hosting provider. Processes server logs including IP addresses for security purposes. Vercel privacy policy.
• MailerLite — our email marketing provider, used only on the Free Checklist signup page. Only receives your email address if you subscribe, and its script only loads after you accept cookies on that page.
• Anthropic — processes the text of emails you send us, to help prepare a suggested reply. Every reply is reviewed and sent by a human; nothing is sent automatically. Anthropic's privacy policy.

Your rights under GDPR

As a resident of the EU/EEA, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your personal data.
• Right to object — you can object to processing based on legitimate interests.
• Right to lodge a complaint — you can complain to Sweden's data protection authority, IMY (Integritetsskyddsmyndigheten): imy.se.

To exercise any of these rights, contact us at hej@kronorandbeyond.com.

Data retention

• Affiliate click logs: retained for 24 months, then deleted.
• Email subscriber data: retained until you unsubscribe, then deleted within 30 days.
• Server logs (Vercel): retained per Vercel's standard retention policy.

Changes to this policy

We may update this policy as our tech stack or affiliate partnerships change. Material changes will be noted with a new "last updated" date below.

Last updated: August 2026