Privacy

Your message. The enquiry form asks what it is about, your name, email and message, and if you like your phone number, organisation, event date and location. The site sends it to me by email and does not store it on the server. I use it only to read your enquiry and answer it.

Spam protection. One connection can send at most five messages an hour. To count them, the site keeps a scrambled form of your IP address (a salted hash, not the address itself) and the times of your messages.

Server logs. Like any web server, my host’s server notes the IP address, time, page and browser of every request. The logs are used only to keep the site safe and to fix problems.

Music, video and fonts. They all come from my own website. Nothing loads from YouTube, Spotify, SoundCloud or any other service unless you click a link to it.

• Booking and event enquiries: steps you ask for before a possible contract (GDPR Article 6(1)(b)).
• Other messages, spam protection and server logs: my legitimate interest in answering you and keeping the site safe (Article 6(1)(f)).
• Cookies and browser storage: only what the features you use need, so the site doesn’t ask for consent.

• Messages: they are only in my mailbox. I delete them when our conversation is over, at the latest after 24 months.
• The spam counter: it looks only at the last hour. Entries older than a day are deleted as new messages come in.
• Server logs: for a limited time as set by my host.

I don’t sell your data, I don’t show ads and I don’t use analytics or tracking.

• My site is hosted by UL.ee (Universaalsed Lahendused) in Estonia. Their servers hold the site, its server logs and the spam counter, and their mail server delivers your message to my mailbox.
• My mailbox is with my email provider, so your message is stored there too.
• Links to Instagram, Facebook, YouTube, Spotify and other services take you to their sites. Their own privacy policies apply there.

The site uses two cookies of its own and your browser’s storage for its features. None of them track you and none come from other companies, so there is no cookie banner.

• sd_locale · cookie, 1 year: the language you last used on the site.
• sd_visited · cookie, 1 year: you have seen the intro on the home page, so it doesn’t play again.

These stay in your browser and are never sent to me:

• sd_prefs · localStorage: sound on or off, motion paused, visual quality, intro seen.
• sd24-level, sd24-finish · localStorage: the tape machine’s volume and finish on Music.
• sd_sound_tip, sd_journey_eras, sd24-reels · sessionStorage, gone when you close the tab: the sound tip, the Journey eras you have seen, your reel pick.

You can delete all of them in your browser settings. The site keeps working; it just forgets your choices.

You can ask me for a copy of your data, ask me to correct or delete it, limit how I use it or object to it, and get it in a format you can take elsewhere. Write to me at the address under “Who is responsible”. I answer within a month.

If you think I handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or to the data protection authority where you live.

When the way the site handles data changes, I update this page and the date at the top.