Last updated: 2026-10-26 · Cookie Policy
The data controller for personal data processed through Sentinel is:
Reverdin Solutions di Marc-André Reverdin
Corso Vittorio Emanuele II 154, 00186 Roma, Italia
VAT number (Partita IVA): IT17458801002
Contact: dpo@sentinelbriefing.com
When you use Sentinel, the following data may be collected and processed:
| Purpose | Legal basis |
|---|---|
| Authentication and account management | Performance of a contract (Art. 6.1.b GDPR) |
| Article collection and presentation | Performance of a contract |
| AI analysis and digest generation | Performance of a contract |
| Sending email digests and notifications | Performance of a contract / consent |
| Service improvement (anonymous statistics) | Legitimate interest (Art. 6.1.f GDPR) |
| Audience measurement without an account (Umami), without cookies (details) | Legitimate interest (Art. 6(1)(f) GDPR), exempt from consent |
| Journey linked to your account and session recording, after your consent | Consent (Art. 6(1)(a) GDPR) |
Account data is permanently deleted or anonymised no later than 90 days after the account is closed; an export can be requested during the first 30 days. The end of a subscription does not close the account, which continues on the free plan. Personal data of an inactive account is retained for 3 years after the last account activity, then permanently deleted or anonymised. Billing data is retained for 10 years in accordance with legal obligations.
Sentinel relies on processors, grouped below by category. The named list of processors is appended to the data processing agreement (DPA) provided to business customers; it is available on request at dpo@sentinelbriefing.com, and any change is notified to customers under contract.
| Category | Location | Purpose | Safeguards |
|---|---|---|---|
| Hosting | Germany (EU) | Servers, databases, encrypted backups | Processing agreement, data kept in the EU |
| Artificial intelligence models | EU and United States | Screening, analysis and drafting of briefings from articles and watch settings | Processing agreement, standard contractual clauses (SCCs) for transfers |
| Web search and fact-checking | United States | Checking the facts cited in briefings | Standard contractual clauses (SCCs) |
| Audio transcription | United States | Transcribing the public podcasts being monitored | Standard contractual clauses (SCCs) |
| Payment | EU and United States | Subscriptions, invoicing, payment methods | Processing agreement, SCCs |
| Email delivery | EU | Briefings, alerts and account messages | Processing agreement |
| Audience measurement (PostHog Inc.) | EU (Frankfurt), US company | Only after your consent: journey linked to your account and session recording | Processing agreement, Data Privacy Framework and SCCs |
Transfers to the United States rely on the standard contractual clauses adopted by the European Commission (GDPR Article 46.2.c) or, where the recipient has joined it, on the EU-US Data Privacy Framework.
Under the GDPR (Articles 15–22), you have the following rights:
To exercise these rights, contact: dpo@sentinelbriefing.com. We will respond within one month (extendable to three months for complex requests).
If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with a supervisory authority. As the publisher is established in Italy, the lead authority is the Garante per la protezione dei dati personali: www.garanteprivacy.it. You may also contact the supervisory authority in your country of residence (in France, the CNIL: www.cnil.fr).
We measure traffic on the platform with two tools.
Without your consent: Umami, an open-source tool we host ourselves on our servers in the European Union. No cookies, nothing stored on your device. Umami computes a visit identifier on the server from the IP address and the browser, with a salt renewed every month; the IP address is not kept, only the country and city derived from it. We count page views (without the address parameters), referrer, device type and a few steps (sign-up, sign-in, creating an item, subscription), without linking them to a person or an account. This data is deleted after 25 months. This measurement is exempt from consent (article 82 of the French Data Protection Act, CNIL guidelines). To object, turn on your browser's Do Not Track or Global Privacy Control setting: the platform then does not load Umami.
With your consent ("Accept" in the banner): PostHog (PostHog Inc., data hosted in the European Union) also sets a cookie on this site only, for 6 months, to follow your journey, link it to your account by its internal identifier (never your email address or name) and to your organisation, and record your sessions, with inputs and text masked. Session recordings are deleted after 30 days. Other PostHog data is deleted no later than 25 months after your last visit. Without your consent, PostHog is not loaded.
Your choice is kept for 6 months in the py_consent cookie. You can change it at any
time: Manage cookies. If you withdraw your consent, the PostHog
cookie is erased from your browser.
Measurement cookies:
py_consent (necessary, 6 months): keeps your choice in the banner.ph_<key>_posthog (6 months, only after "Accept"): PostHog audience measurement.Legal bases: legitimate interest for measurement without an account (Umami), consent for PostHog measurement. Transfers: Umami data stays on our servers. PostHog Inc. is a US company; data is hosted in the European Union and any access from the United States is covered by the Data Privacy Framework and the European Commission's standard contractual clauses. Retention: measurement without an account, 25 months; PostHog measurement, no more than 25 months after the last visit; session recordings, 30 days.
For information about cookies, please read our Cookie Policy.
For any question relating to the protection of your personal data: dpo@sentinelbriefing.com