Last updated 13 October 2026

How your data is handled

Walking Points is a personal project run from Denmark by Lars Rothschild Henriksen. This page covers the website, the waitlist, the Walking Points for Teams enquiry form and reviewing episodes. If you are in the beta, on the web or in the Walking Points app, the beta privacy statement covers your show. You can reach us about anything here at hello@walkingpoints.fm.

The waitlist

When you join, we store your email address and, if you fill it in, what you'd like your show to be about, plus how you heard about us if you say, and which of our links brought you if you came through one (for example the link in a season's show notes). We use it for one thing: To write to you about early access to Walking Points. We don't share it, sell it or add it to any other list.

• Legal basis: Your consent, which you give by submitting the form and can withdraw at any time.
• Where it goes: The form posts to our own domain, where Cloudflare takes it and keeps it for us until the machine that makes the episodes collects it. MailPace sends the mail we write back to you.
• In our emails: Nothing. We moved our mail to a provider that does not track opens and does not rewrite links (MailPace, EU-hosted), so our emails carry no tracking pixel and every link goes straight where it says it goes. We cannot tell whether you opened an email, and we would rather not know.
• Spam check: The form runs Cloudflare Turnstile, which decides whether you are a person without cookies and without tracking you across sites.
• How long: Until you get access or tell us to delete it, whichever comes first.

Visiting the site

This site sets no cookies and makes no requests to advertising or tracking services. The fonts are served from this site itself.

• Hosting: Pages are delivered through Cloudflare from Google Cloud Storage. Both handle technical data such as your IP address to deliver the page and protect it from abuse; we don't receive or store it.
• Visit statistics: Our own site counts each page view. It keeps which page, whether you came to it directly, from another of our pages, a search engine, LinkedIn, another site or one of our short links, and a coarse browser type. It also keeps the country Cloudflare places the visit in (Cloudflare works it out from your address and gives us only the country, never the address itself), whether it was a phone, a tablet or a computer, the name of the website when another site, not a search engine or social network, linked to us, and which of our Listen on buttons was clicked, and on which page (the page counts the click as you leave; the button still takes you straight to Apple, Spotify or YouTube). There is no cookie and no IP address, and we do not look at who you are. The name of a referring website is the site's own address (for example example.com), never a page, and we drop it if it looks private. Cloudflare keeps the count for about three months.
• Our short links: A link such as walkingpoints.fm/r/four-day-week counts each click and the country it came from (Cloudflare works it out from your address and gives us only the country, never the address itself), with no IP address and nothing that identifies you, so we can tell which episode or post brought visitors. Cloudflare keeps the count for about three months.

The newsletter

The newsletter is a separate choice from the waitlist, an unticked box you have to tick yourself. Ticking it starts a double opt-in: One confirmation email, and nothing further goes out until you click the link in it. Every newsletter mail carries an unsubscribe link, and unsubscribing does not take you off the waitlist.

Mail about a public series

Every public season on the series page has a field where you can leave your email to hear when there is a new episode of that series or a new season. It is its own list, separate from the waitlist and the newsletter. Leaving your email sends one confirmation mail, and nothing else is sent until you click the link in it. An address that is not confirmed within 7 days is dropped. We keep your email, the series you asked about, the times you asked and confirmed, and which update mails we sent you, nothing else about you. A request waits in a queue for up to 14 days before we pick it up, and if we cannot send the confirmation mail we try a few more times. Every update mail carries an unsubscribe link that works in one click, and nothing is sent after you click it. What outlives an unsubscribe or a deletion request is a one-way fingerprint of your address, kept only so that we never mail you again. To have your address deleted, write to hello@walkingpoints.fm. The mails are sent through a relay that adds no tracking.

Reporting a mistake

The report a mistake form keeps what you write and your email, if you give it, only to handle the report. We delete it 12 months after the report is handled, and only Lars sees it. It's processed on Cloudflare's KV store and on our own machine, and the report text may be checked against the episode with an AI model (Anthropic's Claude).

Asking about Walking Points for Teams

The enquiry form on the Teams page keeps your name (if you give it), your work email, your company, the size of your team and, if you fill it in, what you would use it for, together with the date and, if you came from a season page, which one. We use it for one thing: To reply to you about Walking Points for Teams. We don't share it, sell it or add it to any list, and the form has no newsletter box.

• Legal basis: Taking steps at your request before a possible agreement, which you ask for by sending the form.
• Where it goes: The form posts to our own domain, where Cloudflare takes it and keeps it for us until the machine that makes the episodes collects it (at most 120 days). Only Lars reads it. It is never put into an AI prompt. When an enquiry arrives, a short notice goes to Lars' own phone, and the whole enquiry, as you wrote it, is mailed to our own mailbox, so that he sees it the same day and it never depends on one channel. That mail is sent through MailPace and kept in our mailbox at Google. We reply from that mailbox, and we check it for the dates of our correspondence with you (never its contents), to know when we were last in touch: That is what the 12 months below count from.
• Spam check: The form runs Cloudflare Turnstile, as the waitlist does.
• How long: We delete the enquiry 12 months after our last contact with you, unless an agreement follows, in which case it is kept with the agreement and handled under it. You can ask us to delete it sooner at any time by writing to hello@walkingpoints.fm. A deleted enquiry can still sit in an encrypted backup until that backup expires (30 days).

Reviewing episodes (WP Review)

Walking Points may ask you to listen to episodes before they go out, as one of our staff or for your organisation's own series, on the review web page or in the WP Review app. For that we keep your name, whether you review as staff or for a client, which series you may see, your email if you gave it to us (to send you your personal link and, only if you asked, one mail when something new waits for you), and your decisions: Approve, reject or heard, the time, which version you heard, and the note you wrote with it. A note is read by Lars. It is never put into an AI prompt and never spoken in an episode.

• Where it goes: What you can review, with your name and role, sits in Cloudflare's store until we remove your link. Your decisions wait there until our own machine collects them (never kept there past 30 days), and are kept on that machine with the episode they are about. The invitation mail goes through MailPace and carries no tracking.
• The app: WP Review keeps your link in your iPhone's Keychain, on that device only. The camera is used only to read the QR code of your link. The app has no analytics, no advertising and no tracking. While it is in testing, Apple delivers it through TestFlight and may share crash reports with us.
• Legal basis: Our agreement with you or your organisation to review episodes.
• How long: Your link works until we remove it or you ask us to. Your decisions stay with the episode they are about, as the record of who approved what. Your name and email stay on your reviewer record until you ask us to delete them, and then we do, except that a decision you made stays on record with your name as the record of who approved an episode.

Buying an extra deep dive in the app

An extra deep dive, bought in the Walking Points app, is a purchase through Apple, which takes the payment and keeps your payment details: We never see them. Your phone sends us the signed receipt of the purchase, we check it against Apple's public certificate, and we keep the receipt and our verdict on it for up to 30 days, so that the app can show you the result. We keep the transaction number, with no name and no payment detail, for good, even after you delete your show, only so that the same purchase can never be used twice. The legal basis is the contract you made when you bought it.

Providers outside the EU

Cloudflare, Google and Apple (for the apps while they are in testing) may process data in the United States; MailPace is in the EU. Those transfers rely on the providers' own safeguards under EU law, such as the EU-US Data Privacy Framework or standard contractual clauses.

Your rights

You can ask to see the data we hold about you, have it corrected or deleted, or withdraw your consent: Just write to hello@walkingpoints.fm. If you think we've handled your data wrongly, you can also complain to the Danish Data Protection Agency, Datatilsynet.