What this site collects, and what it does not.
A short notice, because there is little to describe. This website sets one cookie, calls no third party, counts visits without recognising anyone, and collects nothing else unless you write to us.
The controller.
Fromcode 119 Ltd. of Sofia, Bulgaria is the controller for the personal data described here. We are established in the European Union and this notice is written to the GDPR. To reach us about anything on this page, use the contact form on this site and mark it for the attention of privacy.
Four things, and only when they apply.
There is no fifth. If you read this site and write nothing, the only records of your visit are a technical server log and an anonymous visit count.
If you write to usThe contact form
Your name, e-mail address, subject and message, plus the exact consent wording you agreed to. We use it to answer you. The lawful basis is your consent, which you give with the checkbox and may withdraw at any time.
AlwaysOne security cookie
A cookie named fc_csrf, which proves a form submission came from this site rather than another. It is strictly necessary, carries no identity, and is not used to recognise you. It needs no consent banner because it does nothing a banner would ask about.
AlwaysAn anonymous visit count
Our own analytics, on our own servers, counts which pages are read, which site or campaign sent the visit, and the approximate country, region and city, worked out from the IP address. To count a visitor once without a cookie, the server makes a one-way hash of the IP address and browser with a random value that changes every day and is then deleted. The IP address itself is not stored, nothing is saved in your browser, and you cannot be recognised on another day or another site. The lawful basis is our legitimate interest in knowing how the site is used.
AlwaysServer logs
Our servers record the request, the time and the originating IP address, as any server must to operate and to defend itself. The lawful basis is our legitimate interest in keeping the service running and secure.
The part most notices leave out.
These are not promises about the future. They are properties of the page you are reading, and you can confirm every one of them in your browser.
No trackingCounted, never followed
No third-party analytics, no tag manager, no pixel, no heatmap, no session recording. The visit count above runs on our own servers and cannot tell who you are or recognise you tomorrow.
No third partiesNothing loads from elsewhere
Every font, script, style and image is served from our own domain. No content delivery network, no embedded video, no social widget. The only external addresses on this site are ordinary links you choose to follow.
No tracking cookiesOne cookie, and it is a lock
There is no advertising cookie, no cross-site identifier and no profile. Nothing here follows you to another website.
No sellingYour data is not a product
We do not sell, rent or share personal data for anyone else’s marketing, and we never will. There is no arrangement of that kind to disclose.
We keep enquiries for two years.
A message you send through the contact form is kept for twenty-four months from your last contact with us, so that we can pick up a conversation where it left off, and is then deleted. Server logs are kept for a short operational period and rotate automatically. If you ask us to delete your message sooner, we will.
Our hosting provider, and nobody else.
This site and its data run on infrastructure Fromcode 119 Ltd. rents and administers within the European Union. Our hosting provider can technically access the servers, as any hosting provider can, and is bound by a data-processing agreement. The approximate location of a visit comes from DB-IP’s IP-to-city database (CC BY 4.0), which we keep on our own servers, so no address is sent to them. Beyond that, messages you send are read by us alone. If we ever need another processor, this page will say so before it happens.
What you can ask us to do.
Write to us through the contact form and we will answer within one month, which is the period the GDPR allows. There is no charge.
AccessSee what we hold
Ask for a copy of the personal data we hold about you, and what we are doing with it.
CorrectFix what is wrong
Ask us to correct anything inaccurate or complete anything missing.
DeleteHave it erased
Ask us to delete your data. Where we have no overriding reason to keep it, we will.
Restrict and objectLimit what we do
Ask us to stop or restrict processing, including anything we do on the basis of legitimate interest.
PortabilityTake it with you
Ask for the data you gave us in a structured, machine-readable form.
WithdrawChange your mind
Withdraw the consent you gave with the contact form at any time. That does not undo processing already carried out lawfully.
You can complain to the regulator.
If you think we have handled your personal data badly, please tell us first so we can put it right. You also have the right to complain directly to the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), or to the authority in the EU country where you live.
If this notice changes, it changes here.
We update this page when what we do changes, and the description above is meant to match the site as it actually behaves. If you find something on this site that this notice does not describe, that is a fault worth reporting to us.