Privacy Policy
Introduction
This Privacy Policy explains how OpenHades Cloud Services Konrad Mosoń ("we", "us", or "our"), handles information when you visit openhades.com. We are committed to protecting your privacy and being transparent about our data practices.
Data We Collect
This is a static website with minimal data collection. We collect only:
Server Logs
Our web server automatically records standard access logs, which may include:
- IP address
- Browser type and version (User-Agent)
- Pages visited and timestamps
- Referring URL (if applicable)
Analytics
We run Umami on our own servers at utr.openhades.com. It records, per page view:
- Page URL and referring URL
- Browser, operating system and device type
- Screen size and browser language
- Country, region and city, derived from your IP address
- Page load performance timings
Nothing is written to your device — no cookie, no local storage — which is why this site shows you no consent banner. Your IP address and browser string are combined into a one-way hash to count returning visits and are never stored in their original form. That hash is re-salted every month, so it cannot follow you beyond it, and it is different for every site using the same software.
To opt out, run localStorage.setItem('umami.disabled', 1) in your browser's console on this site. The tracker checks that flag before every request and sends nothing while it is set. That one flag covers everything on this page: the heatmaps below depend on the tracker having opened a session, so with the tracker silent they never send anything either.
Heatmaps
We also record where people click and how far down a page they get, so we can tell which parts of a page are actually being used. Per page view that is:
- Where on the page you clicked, as coordinates measured both against the full page and against the part of it visible on your screen
- How far down the page you scrolled, recorded as the furthest point you reached
- The dimensions of the page and of your browser window, which are what make those coordinates mean anything
That is the whole of it. We do not record your screen, take a copy of the page, or keep the text or the identity of whatever you clicked — the recorder inspects the clicked element only long enough to measure the page around it, then discards it, so no description of it is stored anywhere. Nothing you type is captured, and the path your pointer takes between clicks is not followed. Only the clicks themselves.
These records carry the same monthly-rotating identifier as the rest of the analytics — one we have no means of resolving to a person — and, as above, nothing is written to your device, so none of this changes the position on consent.
What We Don't Collect
Beyond the server logs and analytics above, we collect nothing:
- No cookies, and nothing stored on your device
- No third-party analytics — the analytics run on our own hardware
- No third-party tracking pixels
- No session recording, and no copy taken of the page or its text
- No keystrokes, and no following your pointer between clicks
- No form data collection
- No external font services (fonts are self-hosted)
Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process server log data based on our legitimate interest in maintaining the security and proper functioning of our website. This includes monitoring for malicious activity and ensuring service availability.
We process the analytics data described above on the same basis — our legitimate interest in understanding which pages are read and how the site performs. We rely on legitimate interest rather than consent because the analytics neither store nor read anything on your device, which is what would otherwise require us to ask. You can object at any time using the opt-out above, or by contacting us.
Third-Party Data Sharing
We do not share your data with third parties. All server logs are stored on our own internal infrastructure and are not transmitted to external services.
Your Rights Under GDPR
Under GDPR, you have rights regarding your personal data, including access, rectification, erasure, and data portability. However, we cannot fulfill individual data requests because:
- We hold only server logs and pseudonymous analytics, neither of which names anyone
- IP addresses cannot identify individuals without external data we don't have
- The analytics store a one-way hash rather than your IP, and it cannot be reversed
- You cannot prove which log entries or analytics rows belong to your device
All server logs are automatically deleted after 90 days. If you have questions, contact us below.
Data Retention
Server logs are retained for 90 days for security and operational purposes, after which they are automatically deleted.
Analytics data is kept for as long as the site runs, so that traffic can be compared year on year. It contains no identifiers that outlive the month in which it was recorded: the visitor hash is re-salted monthly, so rows from different months cannot be joined back together into a history of one person.
Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.