Privacy
What This Site Knows About You
Almost nothing, and this page is short enough to prove it. If you have read a privacy notice that ran to four thousand words, it was long because the site had a lot to account for. This one does not.
- Zeroconf Software, Bacău, Romania
- hello@zeroconf.software
- ANSPDCP, Romania
- 31 August 2026
What is not collected
The Short Part
These are not settings that happen to be switched off. None of it is built into the site, which is why there is no banner asking your permission for it.
cookies of any kind, including functional ones
visitor analytics: no Google Analytics, no Plausible, no server-side tagging
advertising or remarketing pixels
third-party requests: fonts, scripts and images all come from this domain
fingerprinting, session recording or heatmaps
consent banner, because there is nothing to ask consent for
You can check every line of that with your browser's network tab open. It is the same claim the ledger on the homepage makes, and it is the reason this page can be this short. One script does report how quickly this page loaded for you; it is described below, and it is the reason the second line says visitor analytics rather than analytics.
What is processed
The Three Things That Do Exist
Being honest about these is the point. A notice that claimed nothing at all is processed would be false.
Server logs
This site is hosted on Vercel, and like any web server it records requests: your IP address, the page requested, the time, and your browser's user-agent string. An IP address is personal data under the GDPR, so it is named here rather than waved past.
These logs exist to serve the site and to spot abuse. They are not read routinely, not joined to anything else, and not used to build a profile of you. Retention is governed by Vercel's own platform settings.
Legal basis: legitimate interest in operating and securing a website (Art. 6(1)(f) GDPR).
How fast this page was
A small script measures this page's Core Web Vitals in your browser and reports them to Vercel Speed Insights. It is served from this domain and reports back to this domain, so it makes no third-party request. It sets no cookie and reads no storage.
Each report contains the route, the page URL, your connection type, browser, device type, operating system, country, and the measurement itself. It does not contain your IP address, and there is no identifier in it, so two visits by you cannot be recognised as the same person and no browsing session can be reconstructed.
It exists because this site sells performance work, and the honest version of that means measuring the site on real devices rather than trusting a score from a test machine.
Legal basis: legitimate interest in knowing whether the site actually performs for the people using it (Art. 6(1)(f) GDPR). No consent is requested because nothing is stored on your device and nothing identifies you.
Email you send
If you write to hello@zeroconf.software, that email is received and kept: your address, your name if you give it, and whatever you chose to put in the message.
It is used to answer you and, if we work together, to run the engagement. It is not added to a mailing list, because there is no mailing list. It is never sold, and it is not passed to anyone else unless the law requires it.
Legal basis: steps taken at your request before entering a contract, and the contract itself once there is one (Art. 6(1)(b) GDPR).
Who else sees it
Vercel, as processor, for the logs and the performance measurements. The email provider, as processor, for correspondence. An accountant, for anything that becomes an invoice, and the tax authority where the law requires it. Nobody else.
Your rights
What You Can Ask For
These apply to anyone in the EU, whether or not we have ever worked together.
Under the GDPR you can ask for a copy of the personal data held about you, ask for it to be corrected, ask for it to be deleted, ask that processing be restricted, object to processing carried out under legitimate interest, and ask to receive your data in a portable form.
Ask by email. There is no form and no identity-verification hoop for a request as small as this is likely to be. In practice, deleting everything held about you means deleting an email thread, and it will be done within thirty days and usually the same week.
If you are not satisfied with how a request was handled, you can complain to the Romanian supervisory authority,ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), or to the authority in your own EU country.
Changes to this notice
If it changes materially, the date at the top of this page changes with it. There is no archive of previous versions, because there have not been any.
