Last updated: 12 September 2026. This policy describes how Tor Hidden Services handles personal data.
Who is responsible
This site is published by Jesus Cordonero, based in the Netherlands. For any question about your data, or to exercise the rights described below, write to [email protected].
Because the publisher is established in the Netherlands, this site is subject to the General Data Protection Regulation and to Dutch data protection law.
What this site does not do
Stating this first, because it covers most of what people want to know.
- No analytics. There is no Google Analytics, no visitor tracking, no heatmaps, no session recording.
- No advertising. No ad networks, no advertising cookies, no behavioural profiling.
- No third-party fonts. Typefaces are served from this site’s own server, so loading a page does not tell any other company that you visited.
- No avatars loaded from elsewhere. Comment avatars are switched off, so reading a page with comments on it does not contact any other service.
- No social media widgets and no embedded content that reports back elsewhere.
- No accounts. Registration is closed. There is nothing to sign up for.
Taken together, this means your browser talks to this site and to nothing else.
What is collected
Server logs
The web host records standard request information: IP address, browser identification, the page requested, and the time. This happens for every website and is used to keep the service running and to investigate abuse.
Legal basis: legitimate interest in operating and securing the site. Retention is determined by the hosting provider rather than by this site; see Namecheap’s own privacy documentation for their period.
Comments
If you leave a comment, the form collects whatever name and email address you choose to enter, along with your IP address and browser identification. Name and email are optional; you may leave both blank, and you are free to enter a name that is not yours.
Comment content is checked by an automated spam filter operated by Automattic Inc., which means the comment and the associated IP address are transmitted to that company for assessment.
All comments are held for review before they appear.
Legal basis: consent, given by submitting the form. Retention: indefinitely, unless you ask for removal.
If you would rather not be in a database of people who commented on articles about Tor, do not comment. That is a reasonable position and no offence is taken.
If you write to the address above, that email and its contents are held for as long as needed to deal with it. Ordinary email is not private in transit or at rest. Do not send anything sensitive.
Cookies
Covered separately in the cookie policy.
Who your data is shared with
No personal data is sold, and none is shared for marketing. It reaches the following parties only:
- Namecheap Inc., which provides hosting and email for this domain, and therefore holds the server logs and any message you send.
- Automattic Inc., for comment spam filtering, as described above.
- Cloudflare, Inc., which routes traffic to this site and therefore sees the IP address of every request. Established in the United States, under the same kind of contractual safeguards described below.
Data may also be disclosed where there is a binding legal obligation to do so.
Where your data is held, and who can reach it
The hosting and email for this domain run on Namecheap’s United Kingdom data centre. The United Kingdom holds an adequacy decision from the European Commission, renewed in December 2025 and running until December 2031, which means personal data may be transferred there from the European Economic Area without additional safeguards.
Storage location is not the whole picture, though. Namecheap Inc. is itself a company established in the United States, so its staff may be able to reach data held on those United Kingdom servers from outside the European Economic Area. That access is governed by Namecheap’s data processing addendum, which applies to its customers by default and incorporates the standard contractual clauses approved by the European Commission.
Comment spam checking is carried out by Automattic Inc. in the United States, under comparable contractual safeguards.
Your rights
Under the GDPR you have the right to ask for a copy of the data held about you, to have it corrected, to have it erased, to have its processing restricted, to object to its processing, and to receive it in a portable form where that applies.
To exercise any of these, write to [email protected]. There is very little data here, so most requests can be dealt with quickly. Note that identifying which server log entries belong to you may not be possible, since there is nothing linking an IP address to a person.
You also have the right to complain to a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.
Children
This site is not directed at children and does not knowingly collect data from them.
Changes
Material changes to this policy will be noted here with the date. The date at the top always reflects the current version.