Legal
Privacy
What this website collects, why it collects it, and what it does not do.
Partly outstanding.
The description of what this site does is accurate and was checked against the code. The formal part — who the controller is, the legal bases, how long things are kept — has not been supplied and is listed at the foot of this page. This site must not go live until those are filled in.
What happens here
If you do nothing, we collect nothing
This site sets no cookies, loads no analytics, no tag manager, no advertising pixel and no embedded video or map. Reading it leaves nothing on your device and creates no record associated with you. Your browser fetches the pages and two typefaces, which are served from this site rather than from a third party.
If you send the contact form
We store what you typed — your name, email address, and if you filled them in, your company and roughly how many sites you look after — together with your message. It is used to reply to you and for nothing else. It is not sold, not used for marketing lists, and not passed to anyone outside the operator.
Your IP address is not stored
The contact form is rate-limited, which needs to recognise a repeat sender. It does that from a keyed hash of the address, not the address: the result cannot be turned back into an IP, identifies nothing but “the same sender as a moment ago”, and ceases to mean anything when the key is rotated. The address itself is never written down.
The newsletter you were not signed up to
There is no newsletter and no mailing list. Sending the contact form subscribes you to nothing.
Your rights
Under the GDPR you may ask what we hold about you, have it corrected or deleted, object to it being processed, and have it provided to you in a portable form. For this site that means your enquiry, and asking is enough — it is a short list and there is no process to go through.
Still to be supplied
These are statements by whoever operates this site rather than facts about the software, so they are left blank rather than guessed at.
- Controller
- To supplyThe name and address of the natural or legal person who decides why and how this data is processed (Art. 4 (7) GDPR).
- Data protection officer
- To supplyContact details, if one has been appointed.
- Retention period
- To supplyHow long an enquiry is kept once it has been answered. The collection stores them indefinitely today.
- Hosting and processors
- To supplyWho hosts this site and the database, where, and on what contract (Art. 28 GDPR).
- Supervisory authority
- To supplyThe authority a complaint can be lodged with — ordinarily the one for the controller's federal state.