Privacy — document pending review

Important notice

Human and legal review required: this is not a final legal privacy policy. The public V1 deploys no advertising, external analytics or public account form.

Current technical access log

For security, diagnosis and an understanding of technical use, the server may record the IP address, UTC and local times, method, path without a query string, HTTP status, duration, requested language, browser language, referrer origin and user agent. Device class, operating system, browser and bots are only inferred from that user agent; they are not a certain identification of the physical device.

These text files are stored outside the public web root for a technical retention period configured to 30 days by default. They deliberately exclude URL parameters, form bodies, passwords, cookies and session tokens. Requests served directly by IIS may appear in IIS logs rather than the PHP access log.

Offline mode

Administration uses a strictly necessary cookie that is secure and unavailable to JavaScript. Public content may be stored locally by the service worker for offline reading.

To complete before approval

The responsible entity, contact details, applicable legal basis, rights, request process and final retention period must be confirmed by a person familiar with the relevant jurisdictions before definitive legal publication.