Collected data
Required email address, optional nickname, optional source category, access consent, separate marketing consent, language and limited anti-abuse logs.
Privacy
Privacy Policy
The collection remains intentionally minimal. Unnecessary personal data is not requested.
Purposes and legal bases
Access request handling: pre-contractual measures requested by the person. Security and anti-abuse: legitimate interest. Marketing updates: separate explicit consent.
Retention
Unconfirmed requests: 7 days. Security logs with raw IP: 30 days. Anti-abuse IP hash correlation: 12 months. Marketing data and suppression records: 3 years under the documented policy.
Recipients
Data stays limited to the technical components strictly needed for access delivery, email routing, hosting and security operations.