Last reviewed: 23 August 2026
A site that lectures people about data minimisation has an obligation to practise it. This policy is short because there is genuinely very little to describe.
What we collect
- Messages you send through the contact form: your name, email address and the message. Delivered to one inbox, kept until the exchange is finished and then deleted — normally within twelve months.
- Comments: the name, email, optional website and text you submit, plus the IP address and browser string WordPress records for spam filtering.
- Security events: failed login attempts and associated IP addresses, recorded by our security plugin and rotated out after a short period.
- Server logs: standard access records kept briefly by our host.
We run no advertising trackers, no social media pixels and no cross-site analytics. Where usage statistics are collected at all, they are aggregate and not tied to individuals.
What we deliberately avoid
- No account registration, so there is no user database to leak.
- No newsletter or mailing list, so no email list exists to be sold or breached.
- No third-party fonts, scripts or embeds loaded from advertising networks.
- No request for anything sensitive — please never send us keys, configs containing keys, or credentials.
Cookies
Functional cookies remember your comment details and keep caching working. If you follow an affiliate link to a VPN provider or host, that company may set a tracking cookie so the referral is credited to us; that cookie is theirs and is governed by their policy. Blocking or clearing cookies breaks nothing important on this site.
Legal basis and sharing
Where UK or EU data protection law applies, we rely on consent for messages and comments and on legitimate interest for basic site security. Data is processed only by the providers that keep the site running — our host, our email provider and the security, anti-spam and form plugins installed here. Nothing is sold, rented or shared for marketing.
Your rights
You may request a copy of anything we hold about you, ask for it to be corrected or deleted, object to processing, and complain to your data protection authority. Deletion requests are honoured in full and quickly — write through the contact page.
Transfers, retention and security
Our host and service providers may be located outside your country and apply appropriate safeguards to transfers. Retention periods are listed above. The site runs over HTTPS with hardened access controls, but no system is perfectly secure and we will not pretend otherwise.
Children
This site is intended for adults and we do not knowingly hold data about anyone under 18.
Changes
If this policy changes, the date at the top changes with it.