Privacy policy.

1. Scope of this policy

This privacy policy explains how Ralen Journal, an independent editorial publication registered and operated from Jakarta, handles personal data received through this website, through direct correspondence and through ordinary technical logging that occurs whenever a browser requests a page. It applies to every visitor who reads an article, submits the contact form, or otherwise interacts with the site, regardless of whether that visitor is located in Indonesia or elsewhere. It does not extend to the practices of third-party websites that a reader may reach through an outbound link, and readers are encouraged to review the privacy notices published by those separate operators. Where a specific processing activity is not described here, Ralen Journal will treat it according to the general principles of necessity, proportionality and transparency set out in this document.

2. Who is responsible for this data

The entity responsible for personal data described in this policy is Ralen Journal, with its editorial office at Jalan Gatot Subroto No. 87, 12810 Jakarta Selatan, DKI Jakarta, Indonesia. Correspondence concerning this policy can be sent to [email protected] or by telephone to +62 21 2184 7203 during published office hours. A single editor is designated to receive privacy-related correspondence and to coordinate any internal response with the desk that manages the website. This designated contact does not replace or substitute for a reader's own legal counsel when a matter requires independent advice.

3. Personal data we collect

Ralen Journal collects a limited set of personal data. When a reader submits the contact form, we receive the name, email address and message content that the reader chooses to type. When a reader browses the site without submitting anything, our hosting and security infrastructure automatically records technical details such as the requesting IP address, browser type, referring page, approximate geographic region derived from the IP address, the page requested and a timestamp. Where a reader accepts analytics cookies through the consent banner, aggregated, pseudonymised browsing statistics are also generated. We do not knowingly collect financial account numbers, government identification numbers, or any other category of sensitive personal data through this website, and readers are asked not to include such details in the contact form.

4. Legal basis for processing

Where a reader submits the contact form, the legal basis for processing the resulting personal data is consent, given at the moment the form is submitted, combined with our legitimate interest in maintaining an accurate editorial correspondence record. Where technical logs are generated automatically by hosting infrastructure, the legal basis is legitimate interest in keeping the website secure, available and free of abuse. Where analytics cookies are used, the legal basis is the consent a reader gives through the cookie banner described in section seven below, and that consent can be withdrawn at any time with future effect. These bases are consistent with the general principles set out in Law No. 27 of 2022 on Personal Data Protection, which governs the processing of personal data by private entities operating in Indonesia.

5. How personal data is used

Contact form submissions are used to read, evaluate and respond to a message, to assess a correction request relating to a published article, and to keep an internal record of editorial correspondence for quality and consistency purposes. Technical log data is used to detect and mitigate abusive traffic, to assess delivery problems, and to understand, in aggregate, which articles readers are visiting. Analytics data, where consented to, is used only in aggregated form to understand which topics and formats are useful to readers, and is never used to build an individually identifiable profile of a named visitor. Ralen Journal does not sell personal data to third parties, and does not use contact form submissions for unrelated marketing communications unless a reader has separately and explicitly agreed to receive them.

6. Retention periods

Contact form submissions, including any reply correspondence, are retained for up to twenty-four months from the date of the last message in a given exchange, after which they are deleted or irreversibly anonymised unless a longer period is required to resolve an open correction request or a legal obligation. Server access logs generated by our hosting and security providers are retained for up to twelve months and are then automatically purged in the ordinary course of infrastructure operation. Analytics data collected through the cookie described in section seven is retained in identifiable cookie form for up to thirteen months, after which the underlying browser identifier expires and any residual statistics exist only in aggregated, non-identifying form. Cookie consent choices themselves are stored for up to one hundred and eighty days, after which the banner will ask a returning reader to confirm their preference again.

7. Cookies and similar technologies

This website uses three categories of cookies. Strictly necessary session cookies, such as one that supports the mobile navigation menu, expire automatically when the browser is closed and do not identify an individual reader. A preference cookie named rj_cookie_consent stores the choice a reader makes in the cookie banner for up to one hundred and eighty days. Where a reader accepts analytics cookies, self-hosted Matomo analytics software sets a first-party identifier cookie, typically named in the pattern _pk_id, that persists for up to thirteen months, alongside a short session cookie in the pattern _pk_ses that expires after thirty minutes of inactivity. A more detailed breakdown of every cookie, including its purpose and exact lifespan, is published in the separate cookie policy linked from the footer of every page.

8. Third-party processors

Ralen Journal relies on a small number of named processors to operate this website. Website files and the contact form are served through cloud infrastructure operated by Amazon Web Services, with content delivery and basic security filtering handled by Cloudflare. Analytics measurement, where consented to, runs on a self-hosted instance of Matomo, which means visit statistics remain on infrastructure contracted by Ralen Journal rather than being shared with an external analytics network. Outgoing transactional email confirming receipt of a contact form message is delivered through Postmark. Each of these processors is bound by its own data processing terms, and none of them is authorised to use personal data collected on behalf of Ralen Journal for its own independent marketing purposes.

9. International data transfers

Because the infrastructure providers named in section eight operate data centres in multiple regions, personal data collected through this website may be stored or processed on servers located outside Indonesia, including in Singapore, which most of our infrastructure treats as its primary regional facility. Where personal data is transferred outside Indonesia, Ralen Journal relies on the contractual and technical safeguards offered by these established infrastructure providers, including encryption in transit and standard data processing agreements, to maintain a level of protection consistent with Indonesian law. No personal data collected through this website is transferred to a third party for that party's own independent use.

10. Your rights and how to exercise them

Under Law No. 27 of 2022 on Personal Data Protection, a reader whose personal data we hold has the right to request access to that data, to request correction of inaccurate data, to request deletion where retention is no longer necessary, to object to certain processing, to withdraw previously given consent, and to request a copy of data provided directly to us in a structured format. To exercise any of these rights, a reader can write to [email protected] describing the request and providing enough detail, such as the email address used in a prior message, for us to locate the relevant record. We aim to acknowledge every such request within three business days and to provide a substantive response within thirty calendar days, extended where a request is unusually complex and where we notify the reader of that extension and its reason.

11. Complaints and supervisory contact

A reader who is not satisfied with how a privacy request has been handled may first ask for the matter to be escalated internally by replying to the original response with a request for review, which will be handled by a second member of the editorial desk. If the matter remains unresolved, a reader may lodge a complaint with the Indonesian personal data protection supervisory authority established under Law No. 27 of 2022, in addition to any other remedy available under Indonesian law. Ralen Journal will cooperate with any such authority in the ordinary course of an inquiry and will keep the affected reader informed of material developments where legally permitted to do so.

12. Children's information

This website is intended for a general adult readership and is not directed at children. We do not knowingly collect personal data from a person we understand to be a child, and a parent or guardian who believes a child has submitted personal data through the contact form may write to [email protected] to request that the submission be reviewed and, where appropriate, deleted. Because the website does not offer account creation or any interactive feature beyond the contact form, the practical exposure of a child's personal data through ordinary browsing is limited to the technical log data described in section three.

13. Changes to this policy

Ralen Journal may update this policy from time to time to reflect changes in our processing activities, our infrastructure providers, or applicable law, and any material change will be reflected in the revision log below with an updated effective date at the top of this page. We encourage readers to review this page periodically, particularly before submitting personal data through the contact form. Continued use of the website after a revised policy is published constitutes acknowledgement of the updated terms, without affecting any request submitted under a prior version of this policy.

14. Revision log

10 January 2026 — initial internal publication of this privacy framework ahead of the site's public launch. 14 April 2026 — added named third-party processors, concrete retention periods and the current cookie inventory summary. 18 August 2026 — expanded the international data transfer section, clarified response times for rights requests, and added the children's information section published above.