Privacy · Updated 2026-10-10
What we collect, and what we do not.
This is a short, plain disclosure. It is not a lawyer-reviewed privacy policy. We will replace it when we have one.
What we collect
We collect only what you send us, and a count of visits.
- Email list
- Your email address, the list you joined (for example, news about the next build), and the time.
- Messages
- What you type in the message form: your name, your studio or company, your email address and your message, and the time.
- Pulse requests
- If you ask for a Pulse QR code: your name, your school email address, your note and the time, and a one-way hash of your IP address to limit abuse. We keep them while we decide, and delete them after 30 days. Your browser saves your private status link on your device.
- Visit counts
- How many times each page is opened. To count different visitors, we keep a one-way hash of your IP address. The hash changes every day, so it cannot link your visits across days, and we cannot get your IP address back from it.
- Server log
- Like most web servers, ours keeps a standard access log with IP addresses, for security and to find faults. We delete it after 14 days.
- Security records
- If a connection looks like an attack (a wrong password, a scan for weak spots, a refused flood), we record the time, the IP address, its country and what was tried. The country comes from a database on our own server (DB-IP Lite), so the address is not sent anywhere. We keep these records for 90 days. After that we keep only daily counts without addresses, for one year. A summary without any addresses is public: the security report.
- Browser reports
- If your browser sends us a security report about this site, we store it with your IP address and the name of your browser, and delete it after about 90 days.
- Alerts
- Serious security events send an alert to the operator's phone. An alert can contain an IP address. It passes, encrypted, through the phone's push service (Apple, Google or Mozilla).
What we do not collect
- No cookies.
- No analytics scripts, trackers or third-party pixels. The fonts come from this server, not from a third party.
- No advertising identifiers.
- No payment information.
If you choose Day or Nite, your browser remembers the choice. It stays on your device and is never sent to us.
How we use it
We use your email address only to send what you asked for: news about the next build, or a reply to your message. We do not sell or share your data with any third party.
How we store it
Your records are stored in files on the same server that runs this site. Only the operator can read them.
How long we keep it
We keep your email and your messages until you ask us to remove them, or until the project ends. Other records are deleted on a fixed schedule: the server log after 14 days, Pulse requests after 30 days, security records and browser reports after 90 days. Daily security counts without addresses are kept for one year.
Removing your data
Enter your email address below. Within 30 days we remove every record with that address: email list entries and messages.
Changes
When this page changes, we update the date at the top.