Summary
This site has no accounts, no analytics, no advertising, and no tracking cookies. Fonts, images and scripts are served from this site. The one exception is the contact form, which is protected by a Cloudflare Turnstile challenge loaded from Cloudflare. Every other page loads nothing from a third-party domain, and no page builds a profile of you. What follows is the full detail, but that is most of it.
Who is responsible
TowerVector, Portugal, is the data controller for the processing described here. For any question about this policy or to exercise the rights below, contact [email protected].
What we process, and why
Server and network logs
Visiting the site causes technical data to be recorded: IP address, browser user agent, the pages requested, and a timestamp. An IP address is personal data under the GDPR even when we cannot identify you from it.
Legal basis: legitimate interests (Article 6(1)(f)), specifically keeping the site available, diagnosing faults, and defending it against attack. We do not use these logs to identify individuals or to build profiles.
Correspondence
If you email us, we hold your address, your message, and anything you choose to put in it, for as long as needed to deal with the matter and to keep a record of the engagement.
The contact form is the same thing by another route. It takes your name, your email address, and your message, and delivers them to our mailbox as an email. Nothing is written to a database and there is no record of the submission other than that email. The email address is there so we can reply; if you would rather not use the form, the address on the contact section reaches the same mailbox.
Anti-abuse challenge on the contact form
The form is protected by Cloudflare Turnstile, which is what stops it being used to send us automated mail. Loading the challenge discloses your IP address, browser user agent, and the page you are on to Cloudflare, and it may store a short-lived value in your browser to remember that you passed. Cloudflare states that Turnstile does not use this data to build advertising profiles. The challenge loads only on pages that carry the form.
Legal basis: legitimate interests (Article 6(1)(f)) in keeping the form usable and our mailbox free of automated abuse.
Legal basis: legitimate interests in responding to enquiries, or performance of a contract (Article 6(1)(b)) where the correspondence concerns work we are carrying out for you.
Please do not send us sensitive material, credentials, or detailed vulnerability information by ordinary email. For security reports, use the address in our security.txt.
Theme preference
If you switch the site between light and dark, that choice is saved in your browser's
local storage under the key tv-theme. It never leaves your device, is not
a cookie, is not sent to us, and is not used to identify you. Clearing your browser
data removes it.
Who else is involved
We use the following providers. Each processes data on our behalf under a data processing agreement, and transfers outside the EEA rely on the European Commission's Standard Contractual Clauses.
| Provider | Role | Data |
|---|---|---|
| Vercel Inc. | Website hosting | Request logs, IP address |
| Cloudflare, Inc. | DNS, CDN, and attack protection in front of the site | Request logs, IP address |
| Cloudflare, Inc. | Turnstile challenge on the contact form | IP address, user agent, page address |
| Microsoft Ireland Operations Ltd. | Email (Exchange Online) | Correspondence you send us, including form submissions |
What we do not do
- No third-party requests other than the contact form's challenge. No fonts, scripts, or assets loaded from other domains
- No analytics, and no measurement of individual visitors
- No advertising, retargeting, or tracking pixels
- No cookies set by us
- No sale or sharing of personal data with third parties for their own purposes
- No automated decision-making or profiling
How long we keep things
Server and network logs are kept for as long as our providers retain them, which is a matter of days to weeks, and we do not archive them ourselves. Correspondence is kept for as long as the business relationship and any legal or tax obligation requires, then deleted.
Your rights
Under the GDPR you may request access to your personal data, correction of it, erasure, restriction of processing, or portability, and you may object to processing carried out on the basis of legitimate interests. Write to [email protected] and we will respond within one month.
If you are not satisfied with our response you may complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or to the authority in your country of residence.
Changes
If this policy changes materially, the date at the top of this page changes with it. There is no mailing list to notify, because we do not keep one.