No tracking. No analytics. No cookies.

Effective date: 2026-05-14 (rewrite; supersedes the prior policy dated 2023-01-09).

What we collect when you visit this site

Nothing beyond what your browser sends to any web server, and what Azure Static Web Apps records as part of standard hosting (IP address, user-agent, request path). We do not load analytics scripts, third-party trackers or cookies. We do not build visitor profiles.

What we collect when you contact us

When you submit our contact form, we receive what you choose to send: name, email address, organisation and the content of your message. We use it to reply to you. We do not add it to a marketing list. We do not share it with third parties. We retain it for as long as the conversation is active and our legal obligations require.

When you subscribe to our updates

If you subscribe via our subscribe page, we store your email address, the date and time of subscription, and the IP address you subscribed from — as a record of your consent (GDPR Art. 6(1)(a)). We use a confirmed opt-in: your subscription stays inactive until you click the confirmation link, which is valid for 24 hours; unconfirmed addresses are deleted automatically. We store this ourselves on our EU-based Azure infrastructure — we use no third-party email-marketing provider, and we never share or sell it. Every email carries a one-click unsubscribe link, and you can withdraw consent at any time.

Your rights under GDPR

You have the right to access, correct, port and delete any personal data we hold about you. Reach us via the contact form (or the email address in our legal mention) and we will respond within 30 days. The Luxembourg supervisory authority is the CNPD.

Data controller

SPEX S.à.r.l., 2 Rue de l'Industrie, L-4823 Rodange, Luxembourg.
Contact: via the contact form or the email address on our legal mention page.

Draft, pending final legal review.