[Controller: legal name, postal address], contact: [privacy@…] (the "we").
This policy covers the website 7cows.io and the calculators on it. It is written to satisfy the EU/EEA General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (revFADP), which impose substantially the same obligations on us.
We run this site with as little data as we can get away with:
Our web server records each request: the shortened IP address (the last block is discarded
before writing, so 203.0.113.42 is stored as 203.0.113.0), the time, the page requested, the
HTTP status, the referring page and the browser's user-agent string.
We run two self-hosted analytics tools on our own servers — Umami (data.7cows.io) and Shynet
(stats.7cows.io). Neither sets a cookie or stores anything on your device. They record the page
visited, the referring page, and coarse browser, operating-system and screen-size information.
To tell one visit from another they derive a short-lived hash from your IP address and user
agent; the address itself is not kept.
Calculator inputs are processed to compute a result and are not stored in any database. When you create a permalink, the figures are encoded into the link itself — nothing is written on our side. A permalink therefore contains whatever you typed: treat sharing one exactly as you would treat sharing the numbers.
If — and only if — you subscribe, we store your e-mail address, the date of your subscription and the confirmation of it. Subscription is double opt-in: you receive one e-mail asking you to confirm, and nothing is sent until you do.
The site remembers your theme (light or dark) and, briefly, your entered values while you switch languages. Both live in your browser's own storage, never reach us, and are there because you asked for that behaviour. Clearing your browser data removes them.
Our servers are operated by [hosting provider, location]. We do not transfer personal data outside the EU/EEA or Switzerland.
You have the right to access the data we hold about you, to have it corrected or deleted, to have its processing restricted, to object to processing based on legitimate interest, and to receive it in a portable form. Write to [privacy@…] and we will answer within one month.
Given how little we keep, be aware that we usually cannot identify you from it: shortened IP addresses and cookieless statistics cannot be traced back to a person, so for those we may be unable to act on a request (GDPR Art. 11) — which is the point of collecting them that way.
You may also complain to a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU/EEA the authority of your country of residence.
We update this policy when what we do changes. The date above is the current version's date.