← Back to JormunTL

Privacy

Last updated 7 September 2026

What this website collects, why, and what you can ask us to do about it.

Who is responsible

Bored Daoist, jormundevtl@gmail.com. See contact.

What this site collects

Server logs

Our host records the usual request data: IP address, time, the page requested, referrer and browser user agent. This is necessary to serve and secure the site (Art. 6(1)(f) GDPR, legitimate interest in operating it). Logs are kept for [RETENTION PERIOD, e.g. 14 days] and then deleted.

Purchases

Payments are handled by Polar, who act as merchant of record. They collect the billing and payment details needed to complete the sale and to meet tax obligations, under their own privacy notice. We receive the order and licence records associated with your purchase, and process them to deliver the product, provide updates and support, and keep the records tax law requires (Art. 6(1)(b) and (c) GDPR).

Licence activation

When a licence is activated, the installation sends us the licence key, the domain it is being activated on, the product version and the administrator email address. We store this to enforce the one-site licence and to tell you which installation is using it (Art. 6(1)(b) GDPR, performance of the contract). It is deleted when the licence is deactivated or expires and the retention period for billing records has passed.

Analytics, only if you agree

We use Google Analytics 4 to count visits and see which pages get read. It runs only after you accept it in the banner. Until you do, no analytics script is loaded and nothing about your visit is sent to Google. If you decline, that stays true for good.

Accepting also loads Inspectlet, which shows us how pages are used so we can see which sections get read and which get scrolled past. It receives your IP address, browser and device details and the pages you visit, and sets cookies prefixed __insp. The email field on this site is excluded from it, and checkout happens on Polar rather than here, so payment details never pass through a page it can see.

When you accept, your browser loads gtag.js from Google and sends your IP address, the pages you view, referrer, approximate location derived from the IP, and device and browser details to the G-3T887KBKQ9 property. Two cookies are set, _ga and _ga_3T887KBKQ9, both lasting two years, which is what lets Google tell a returning visitor from a new one. We have IP anonymisation on, so the address is truncated before it is stored, and Google advertising signals off, so nothing here feeds ad profiling or is joined to a Google account.

The legal basis is your consent (Art. 6(1)(a) GDPR and section 25(1) TDDDG). You can take it back at any time using , at the bottom of any page. Doing so stops the collection and deletes those two cookies from your browser. Withdrawal does not affect what was collected beforehand.

Google Ireland Limited is our processor for this, under Google's data processing terms, and data is transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which is the transfer safeguard we rely on, backed by the EU Standard Contractual Clauses. US authorities may in principle be able to access data held there. Google deletes the user-level and event-level records after [RETENTION SETTING, either 2 or 14 months, as set in the property's Data retention screen].

You can also refuse on Google's side, independently of us, with their browser opt-out add-on.

What we do not do

We run no advertising or retargeting scripts, no social media pixels, and no embedded content that profiles you. The typefaces this site uses are served from our own server, so no font request reaches a third party. We do not sell or share any of the above, and none of it is used for automated decisions about you.

Your rights

Write to jormundevtl@gmail.com to exercise any of these. If you are in the EU, EEA or UK you also have the right to complain to your local data protection authority.


Questions about this page: jormundevtl@gmail.com