Summary
This site has no contact forms, no accounts, no analytics, no advertising, and no tracking cookies. It loads nothing from third-party domains: fonts, images and scripts are all served from this site, so visiting it does not disclose your IP address to anyone but our hosting providers. It does not build profiles of visitors. What follows is the full detail, but that sentence is most of it.
Who is responsible
TowerVector, Portugal, is the data controller for the processing described here. For any question about this policy or to exercise the rights below, contact [email protected].
What we process, and why
Server and network logs
Visiting the site causes technical data to be recorded: IP address, browser user agent, the pages requested, and a timestamp. An IP address is personal data under the GDPR even when we cannot identify you from it.
Legal basis: legitimate interests (Article 6(1)(f)), specifically keeping the site available, diagnosing faults, and defending it against attack. We do not use these logs to identify individuals or to build profiles.
Correspondence
If you email us, we hold your address, your message, and anything you choose to put in it, for as long as needed to deal with the matter and to keep a record of the engagement.
Legal basis: legitimate interests in responding to enquiries, or performance of a contract (Article 6(1)(b)) where the correspondence concerns work we are carrying out for you.
Please do not send us sensitive material, credentials, or detailed vulnerability information by ordinary email. For security reports, use the address in our security.txt.
Theme preference
If you switch the site between light and dark, that choice is saved in your browser's
local storage under the key tv-theme. It never leaves your device, is not
a cookie, is not sent to us, and is not used to identify you. Clearing your browser
data removes it.
Who else is involved
We use the following providers. Each processes data on our behalf under a data processing agreement, and transfers outside the EEA rely on the European Commission's Standard Contractual Clauses.
| Provider | Role | Data |
|---|---|---|
| Vercel Inc. | Website hosting | Request logs, IP address |
| Cloudflare, Inc. | DNS, CDN, and attack protection in front of the site | Request logs, IP address |
| Microsoft Ireland Operations Ltd. | Email (Exchange Online) | Correspondence you send us |
What we do not do
- No third-party requests. No fonts, scripts, or assets loaded from other domains
- No analytics, and no measurement of individual visitors
- No advertising, retargeting, or tracking pixels
- No cookies of any kind
- No sale or sharing of personal data with third parties for their own purposes
- No automated decision-making or profiling
How long we keep things
Server and network logs are kept for as long as our providers retain them, which is a matter of days to weeks, and we do not archive them ourselves. Correspondence is kept for as long as the business relationship and any legal or tax obligation requires, then deleted.
Your rights
Under the GDPR you may request access to your personal data, correction of it, erasure, restriction of processing, or portability, and you may object to processing carried out on the basis of legitimate interests. Write to [email protected] and we will respond within one month.
If you are not satisfied with our response you may complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or to the authority in your country of residence.
Changes
If this policy changes materially, the date at the top of this page changes with it. There is no mailing list to notify, because we do not keep one.