Privacy policy

What this website collects, why, who receives it and how to have it removed.

Last updated:

Who is responsible

This policy covers xanthoria.tech. The operator of the personal data described here is [Operator legal name]. For any question about your data, write to privacy@xanthoria.tech.

The request form

When you send a request we receive what you typed: your name, email, and, if you fill them in, your company, Telegram username and message. We also receive the page language and which application page you sent it from.

We use these details only to reply to your request and to discuss the project it describes. We do not add you to a mailing list and do not sell or share your details for advertising.

The request is delivered to our team chat in Telegram through the Telegram Bot API, so Telegram processes it on its servers. If delivery fails, the request is kept in our server log so that we can still answer it.

To protect the form from abuse, the server uses your IP address to limit how many requests can be sent in a short time. The address is held in memory for at most ten minutes.

Analytics and cookies

We use Google Analytics 4, loaded through Google Tag Manager, to learn which pages are read, how visitors arrive and whether the site works on their devices. Google Analytics sets first-party cookies (_ga and _ga_<id>) and receives the pages you open, your browser and device type, an approximate location derived from your IP address, and where you came from. The data is processed by Google, including on servers outside your country.

Analytics cookies are set on every visit. The cookie banner controls advertising storage: “Decline” tells Google not to use advertising cookies or to use your visit for ad personalisation. You can change the choice at any time with “Cookie settings” at the bottom of every page, or block cookies in your browser.

The site also stores two small values in your browser: your cookie choice (xanthoria-consent, in local storage) and your language (the lang cookie), so that it does not ask again.

Server logs

Like most websites, our web server records each request: IP address, time, the address requested and the browser’s identification string. We use these records to keep the site running and to investigate faults and attacks.

How long we keep it

  • Requests: as long as we are discussing or working on the project, then deleted when you ask or when they are no longer needed.
  • Google Analytics data: under the retention period set in our Google Analytics property, after which Google deletes it.
  • Server logs: only as long as the server keeps its working logs, which is not intended as an archive.

Your rights

You can ask us what data we hold about you, have it corrected or deleted, and withdraw your consent to its processing. Write to privacy@xanthoria.tech; we answer within ten working days. If you believe we handle your data unlawfully, you can complain to the data protection authority in your country.

Changes

When the site starts collecting something new, this page changes first. The date at the top shows the current version.