Privacy notice

Who is responsible?

The controller for data collected by H3V3N is Dariusz Czyżewski, operating the H3V3N project while it is in development. Privacy contact: [email protected].

What do we collect?

When a public HTML page is successfully loaded, we store the full IP address, date and time (UTC), requested path, country and approximate city derived from Cloudflare network information. Locations may be wrong, particularly when using a VPN, mobile network or proxy.

We do not store submitted form contents, passwords or visitor email addresses in our D1 visits table. The User-Agent header is checked to decide whether a request should count, but is not retained in our visits table. Our counter excludes the private /admin/ area and these privacy pages.

Purposes and legal basis

We use this data for basic traffic measurement, identifying unusual requests, website security and operational diagnostics. We rely on legitimate interests (GDPR Article 6(1)(f)): protecting the website and measuring limited use of it. This basis requires a necessity and balancing assessment against visitors’ rights.

Cookies and sign-in

Visitor Intelligence operates server-side and does not set first-party analytics cookies. Cloudflare Access may use cookies necessary to authenticate the owner to the private administration area. Customer registration is not currently active.

Retention

Our D1 implementation uses a 30-day retention threshold. Expired rows are deleted on the next recorded page view or administrator statistics request. There is not yet a separate daily deletion schedule; if there is no traffic, expired entries may remain in the database until such a request occurs. Older visits from before the module was activated cannot be reconstructed.

Recipients and international processing

Detailed visit records are accessible through the protected CEO dashboard. We use Cloudflare for serving the site, traffic security, Access authentication and D1 storage. Cloudflare processes technical data to provide these services. Processing may involve international transfers; the applicable safeguards and the database location must be confirmed against the Cloudflare account configuration and processing terms. We do not sell visitors’ data.

Your rights

Subject to the GDPR, you may request access, rectification, erasure or restriction of processing, and object to processing based on legitimate interests (GDPR Article 21). You may also lodge a complaint with a competent data protection supervisory authority. Write to [email protected]. To locate a record, we may need information identifying the relevant IP address and period.

Automated decisions and updates

We do not use Visitor Intelligence records to make decisions that produce legal or similarly significant effects on visitors. We will update this notice when purposes, processing or service providers change.