Privacy notice
Spectrane operates with a deliberately small data footprint. We use no advertising cookies, no third-party trackers, and no user profiling. This page explains what we do collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Polish Personal Data Protection Act.
Who we are
Spectrane is published by JW Marketing (the data controller). For any privacy-related question or request, write to contact@spectrane.com.
What we collect, and why
Web analytics
We run a self-hosted instance of Plausible Analytics
at analytics.spectrane.com on a server in the European Union (Hetzner, Helsinki).
Plausible does not use cookies and does not store IP addresses. It computes a short-lived
anonymous identifier from your IP, user agent, and the day's date, used only to count unique
daily visitors; this hash is rotated every 24 hours and cannot be reversed to identify you.
Aggregated, non-identifying counts (page views, referrer source, country, device class) are retained indefinitely. Because no individual is identifiable, this data does not allow us to recognise you across visits.
Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) - understanding which articles are read, to inform editorial planning. The data does not enable individual identification.
Server logs
Cloudflare, our content delivery network, processes basic request metadata (IP address, user agent, requested URL, HTTP status, timestamp) to deliver pages, mitigate abuse, and maintain availability. Cloudflare retains these logs for a maximum of seven days for security analysis.
Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) - security, debugging, and abuse mitigation.
Email correspondence
If you write to contact@spectrane.com, we will see and process your email address, name (where you provide it), and the message you send. We use it to reply, follow up, and - for editorial queries - verify facts. Email is retained for as long as the matter is open and for a reasonable period afterwards (typically up to 24 months) for context if you contact us again.
Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) for replying to inbound enquiries; or, where applicable, performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR).
Who else processes your data on our behalf
We use the following processors, each under a written data processing agreement:
- Cloudflare, Inc. - CDN, DNS, and Pages hosting. Standard contractual clauses in place; EU data residency for cache where supported.
- Hetzner Online GmbH (Helsinki, Finland) - virtual private server hosting Plausible Analytics. Data remains in the EU.
- GitHub, Inc. - source-code repository for the site. GitHub does not receive visitor data; it stores only the publication's source.
We do not sell, rent, or otherwise transfer visitor data to third parties for advertising or marketing purposes.
Third-country transfers
The data above is processed in the EU. Cloudflare, as a US-headquartered company, may transfer limited operational metadata (such as request-routing information) outside the EU; such transfers occur under the EU-US Data Privacy Framework and standard contractual clauses. GitHub, as the source-code host, does not receive visitor data and so does not transfer any.
Cookies
Spectrane sets no cookies. Cloudflare may, in narrowly defined cases, set strictly-necessary security cookies (for example to identify a returning bad actor during a DDoS event); these are not used for analytics or marketing.
Your rights
Under GDPR/RODO you have the right to:
- request access to the personal data we hold about you (Art. 15);
- request rectification of inaccurate data (Art. 16);
- request erasure ("right to be forgotten", Art. 17), subject to legal retention obligations;
- request restriction of processing (Art. 18);
- object to processing based on legitimate interest (Art. 21);
- request data portability where applicable (Art. 20).
To exercise any of these rights, write to contact@spectrane.com. We respond within 30 days.
Right to lodge a complaint
If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority, Urząd Ochrony Danych Osobowych (UODO), or with the supervisory authority of your country of residence.
Updates to this notice
We update this page when our processing meaningfully changes. The "last updated" date below reflects the most recent material revision. Minor wording changes are made without bumping the date.