Privacy statement

Who is responsible

japstein.com, the Netherlands, is the controller for this site. Questions and requests: privacy@japstein.com.

Reading

You can read everything without an account. Our web server keeps standard access logs (IP address, requested page, browser type, time) for security and to keep the site running; they are deleted after at most 14 days. There are no analytics scripts, advertising or tracking cookies, and no third-party scripts.

Every request is also turned into per-minute visitor statistics: requests, errors, response time, data volume, and unique and concurrent visitors. To count visitors, a code is computed from the IP address and browser type (a hash with a key that is replaced every day and deleted after two days), so it can’t be traced back to you and you aren’t recognised on a later day. The IP address and browser type themselves are not stored, and no cookies are used. The site is also checked for availability every minute. The counts are kept for 35 days, on EU servers (OVHcloud, France).

When something breaks, a technical error report (the error message, the page path without its query string, your browser type and, if you are signed in, your account id) goes to the same EU servers. It is used only to fix bugs and kept for up to 90 days.

Posting

Posting requires an account on auth.bouma.cloud, the shared sign-in service for this operator’s sites. Signing in gives this forum your account id, your email address and the name on your account. We store these to recognise you and to contact you about your posts if that becomes necessary. Only your display name is ever shown publicly. It starts as a neutral handle such as “member-4f2k”, can be changed on the account page and does not have to be your real name.

Your threads and replies, including edit times and, when relevant, the reason they were hidden, are public and kept for as long as the forum exists, or until removed by moderation. The session cookie that keeps you signed in is strictly necessary and contains no tracking.

Reports and moderation

When you report content, we store the report, and your account id if you were signed in, so moderators can follow up. To limit abuse, a hashed version of your IP address is held in memory for a few minutes; it is not written to disk. Moderation actions are logged with the moderator’s account id and kept for accountability.

Legal basis and retention

• Account and posts: performance of the agreement you enter when you create an account and post (art. 6(1)(b) GDPR).
• Access logs, visitor statistics, error reports, rate limiting and moderation logs: our legitimate interest in a safe and lawful forum (art. 6(1)(f)).
• Responding to legal notices: legal obligation (art. 6(1)(c)).

Removed content is kept out of public view and deleted once it is no longer needed for handling disputes. If you delete your account at auth.bouma.cloud, your posts stay attributed to a neutral member handle unless you ask us to remove them.

Your rights

You can ask for access to, correction of, or deletion of your data, object to processing, and ask for a copy in a portable format. Write to privacy@japstein.com. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Third parties

Data is hosted in the EU. Fonts are served with the site itself, not from a third-party service. We do not sell or share member data, and only disclose it to authorities when legally required (see the legal page).