Privacy policy.

Controller

The controller responsible for this website under the General Data Protection Regulation is:

Scope of this notice

This notice covers the ConfigOps website and messages sent to the address above. It does not make the publisher the controller for data processed on a WordPress site that uses the ConfigOps plugin.

ConfigOps stores its settings-change evidence inside the relevant WordPress installation. The current plugin does not send that evidence to this website or to the publisher and does not require a ConfigOps account.

Hosting through Vercel

This website is delivered through Vercel Inc., 440 N Barranca Avenue #4133, Covina, California 91723, United States. When you request a page, Vercel processes technical data needed to deliver and protect the service. This can include your IP address, city and country derived from the IP address, the requested resource, date and time, request and response information, referrer information if supplied by your browser, browser and device details, and system configuration information.

The purposes are reliable page delivery, network and information security, abuse prevention, troubleshooting, and maintaining the technical operation of the website. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, stable and efficient provision of this website. The website application does not maintain a separate visitor database.

Vercel states that it keeps personal information only for the minimum period necessary for its contractual and legal obligations and legitimate business purposes, after which it deletes or anonymises the information where possible. More detail is available in Vercel's privacy notice.

Processing may take place in the United States and other countries. Vercel states that it is certified under the EU–US Data Privacy Framework and uses Standard Contractual Clauses or other appropriate transfer mechanisms where required.

Consent and local storage

The website asks whether you permit optional audience measurement before the analytics software is loaded. Declining has no effect on the website's functions. Your choice and the time it was made are stored in your browser's local storage under the key configops.analytics-consent.v1. This entry is necessary to remember and document your privacy choice. It contains no account, name, email address or advertising identifier. The legal basis for this storage is Section 25(2)(2) TDDDG and Article 6(1)(c) and (f) GDPR. The legitimate interest is to respect and demonstrate your choice without repeatedly asking.

You can change a previous choice through Privacy settings in the footer. If analytics is enabled, that control changes to Disable analytics, allowing you to withdraw consent in one click. Withdrawal stops further collection and removes PostHog's local analytics persistence. It does not affect the lawfulness of processing before withdrawal.

Optional analytics with PostHog

If—and only if—you choose Allow analytics, this website loads PostHog to count page views and understand which public pages are useful. PostHog Inc. acts as processor. The integration uses PostHog Cloud EU, whose data infrastructure is hosted in Frankfurt, Germany. The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.

For this limited purpose, the integration sends the page path without query parameters or URL fragments, the page title, event time, broad browser, operating-system and device categories, and random device and session identifiers. Your IP address is necessarily visible to PostHog while receiving the network request, but the PostHog project is configured to discard the raw client IP and not add GeoIP location data to stored events.

Session replay, automatic click and form capture, surveys, feature flags, advertising tracking, campaign parameters, referrer storage, exception capture, person profiles and device-model collection are disabled. The website never sends ConfigOps plugin evidence, form values, names or email addresses to PostHog. PostHog's browser storage uses local storage rather than cookies and is created only after consent.

Analytics events are kept only as long as needed to evaluate this website and are deleted no later than 12 months after collection. Access is restricted to the publisher. PostHog provides further information in its privacy notice, GDPR documentation and trust centre. Requests for access or deletion can be sent to felix@pyrra.net.

Local rendering

Fonts, images and visual assets are served as part of this website. The WebGL effects use rendering information such as viewport size, time and pointer position locally in your browser. That interaction data is not stored by the visual effects or transmitted to the publisher.

Contact by email

The email link on this website opens your own email application; there is no contact form. If you contact the publisher, the message, your email address, its metadata and any information you include are processed to respond to your request. The legal basis is Article 6(1)(b) GDPR where the request relates to a contract or steps before entering into a contract, and otherwise Article 6(1)(f) GDPR based on the legitimate interest in answering enquiries.

Email is provided through Zoho Mail in its European data centre region. Correspondence is kept only for as long as needed to deal with the enquiry and any related claims, unless a statutory retention obligation requires longer storage. Zoho's own processing is described in its privacy policy.

External links

The website links to WordPress.org, GitHub, Pyrra and provider information pages. These services are not embedded and no connection to them is initiated by this website merely because you load a page. If you follow a link, the receiving service processes the technical connection data and applies its own privacy notice.

Your rights

Subject to the conditions of the GDPR, you may have the right to:

• request access to personal data concerning you;
• request rectification of inaccurate or incomplete data;
• request erasure or restriction of processing;
• receive data you provided in a portable format where applicable; and
• object to processing based on legitimate interests for reasons arising from your situation.

To exercise a right, email felix@pyrra.net. No automated decision-making or profiling takes place through this website. Technical connection data is generated automatically when a page is requested; without it, the website cannot be delivered.

Right to complain

You may lodge a complaint with a data protection supervisory authority. The authority responsible for the controller is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Security and changes

The website is delivered using HTTPS encryption. This notice will be updated if the website, its providers or the applicable requirements change. The date at the top identifies the current version.