Privacy policy

This website (clipspace.djt-group.com) is run by Jáchym Šolta as the data controller in the sense of the EU General Data Protection Regulation (GDPR). Contact: jachym@djt-group.com.

When you visit this site, our hosting provider Vercel Inc. (as our data processor) automatically processes standard technical server logs: your IP address, browser user-agent, requested URL, and time of request. This happens on every website on the internet – it's how web servers work.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in serving the site reliably and protecting it from abuse. We do not store these logs ourselves and cannot search them; they are retained only for the period Vercel applies under its own policy, and we never use them to identify visitors. You can object to this processing at any time under Art. 21 GDPR using the contact address above.

To keep the public API endpoints from being hammered, the server also counts recent requests per IP address in memory. Those counters are never written to disk and disappear within minutes.

The homepage has a feedback form. Using it is entirely optional. When you send it, we receive what you typed: your message, and – only if you chose to fill them in – your name and email address. The form also notes which section of the page you sent it from, so we know what you are talking about.

The message is delivered as an ordinary email to clipspace@djt-group.com through Resend Inc. (our data processor for email, based in the United States; transfers are covered by its data processing agreement with standard contractual clauses). If you left an email address, you also get one automatic confirmation from us and we may reply to you there. Nothing from the form is stored in a database or shared with anyone else; we keep the email until your message is dealt with, then delete it.

The legal basis is Art. 6(1)(b) GDPR – answering the request you sent us – and, for keeping the form from being abused, our legitimate interest (Art. 6(1)(f)): the server counts recent submissions per IP address in memory for a few minutes and rejects floods. Those counters are never written anywhere.

Vercel Inc. is based in the United States, so serving this site can involve transferring the technical data described above outside the European Economic Area. Those transfers are covered by the standard contractual clauses in Vercel's data processing addendum, the safeguard foreseen by Art. 46 GDPR. Requests from Europe are served from Vercel's Frankfurt region.

Apart from Resend, which only ever sees what you send through the feedback form, no other company receives your data. We use no advertising networks, no content delivery networks of our own, and no third-party embeds – every font, script and image on this site is served from this domain.

We use Vercel Web Analytics, a privacy-friendly analytics tool. It counts page views and tells us roughly where visitors come from (country, referrer, device type) in aggregate. It sets no cookies, uses no cross-site tracking, and does not build a profile of you or store data that identifies you – which is why this site needs no cookie banner.

• No cookies are set when you browse this site – which is why there is no cookie banner. (The one exception is the sign-in cookie on our own password-protected admin page, which is strictly necessary and which visitors never reach.)
• No Google Analytics, no advertising, no social media pixels.
• No accounts, no newsletter, no sign-up of any kind. The only thing you can fill in is the feedback form, and only if you want to.
• No fingerprinting, no cross-site tracking, no profiles, and no automated decision-making about you.
• No data is sold or shared with anyone beyond the services described above.

Under the GDPR you have the right to access, rectify, or erase personal data concerning you, the right to restrict or object to processing, and the right to data portability. Since we hold no data about you beyond transient hosting logs we cannot ourselves search, exercising these rights will usually be quick: email us and we'll help.

You also have the right to lodge a complaint with a supervisory authority – in the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ), or the authority in your own EU country.

If ClipSpace ever launches features that touch personal data (accounts, a waitlist), this policy will be updated first and the date above will change. The whole site is versioned on GitHub, so every historical version of this policy stays publicly auditable.