Privacy

Who is responsible for your data

The data controller for this website is Diarmuid Moriarty, established in Cork, Ireland.

Data-protection queries and requests should be sent to diarmuid@verdanyx.com.

No data protection officer is appointed. The processing described below is not large-scale monitoring and does not involve large-scale special-category data, so the statutory appointment criteria are not met.

What is processed, why, and on what basis

Information you enter into a tool

Your entries are sent to a Verdanyx endpoint, used to calculate the result returned to your browser, and then discarded. They are not written to a database, not placed in the page HTML, public files or browser bundles, and not retained after the response is sent.

The lawful basis is our legitimate interest in operating the tool you asked to use (Article 6(1)(f)). The tools do not ask for your name, address, account numbers or health information, and you should not enter them.

Technical request data

Like every website, the hosting provider processes basic request data: IP address, timestamp, requested route, response status, user agent and referrer. This is used to deliver the page, to detect and stop abuse of the calculation endpoints, and to diagnose errors.

The lawful basis is again legitimate interest (Article 6(1)(f)): the site cannot be delivered, kept available or defended against automated abuse without it. Verdanyx also counts recent requests per address over a short rolling window to enforce a rate limit.

Anonymous audience measurement

Verdanyx uses Vercel Web Analytics to count page views and understand which pages are being used. It records anonymous, aggregate information such as the page path, referrer, approximate country or region, device type, browser and operating system. It does not use cookies or local storage, build a cross-site profile, or give Verdanyx a way to identify an individual visitor.

The lawful basis is legitimate interest (Article 6(1)(f)): measuring whether these public tools are found and useful, using the least intrusive configuration available. A temporary visitor identifier used for daily de-duplication is discarded after 24 hours.

Correspondence

If you email a correction or a rights request, that email and its contents are processed to answer you and, where a correction changes a tool, to record why the change was made. The lawful basis is legitimate interest, and legal obligation (Article 6(1)(c)) where the message is a data-protection request we are required to answer.

Who else receives it

• Vercel Inc. hosts the site, runs the calculation endpoints and provides Web Analytics. It processes request and anonymous measurement data on our instructions as a processor, and operates the platform-level security and request-logging services in front of the application.
• The domain registrar and DNS provider resolve requests for the hostname before they reach the application.
• An email provider handles messages you choose to send to the contact address.

There are no advertising networks or data brokers. Vercel Web Analytics is the only audience-measurement service. Verdanyx does not sell personal data or use it for advertising, and does not disclose it except where legally required. See Vercel's Web Analytics privacy documentation.

How long it is kept

• Tool submissions: not retained. They exist only for the lifetime of the request that calculates the result.
• Rate-limit counters: a rolling window measured in minutes, after which the counter expires automatically.
• Hosting request and function logs: retained by the hosting provider under the standard retention for the plan in use, which is a matter of days rather than months, and is not extended by Verdanyx. They are used only for security and diagnostics.
• Web Analytics: the temporary visitor identifier is discarded after 24 hours. The remaining page-view statistics are anonymous aggregate reports, not a retained visitor profile.
• Correspondence: kept while the issue is open, then for as long as needed to evidence a correction to a published calculation, and no longer than two years unless a legal claim requires otherwise.

Transfers outside the EEA

The hosting provider is a US-headquartered company. Requests are served from EEA infrastructure where the platform configuration allows it, but support, security and administrative access can involve access from outside the EEA. Those transfers rely on the European Commission's standard contractual clauses together with the provider's supplementary technical measures, under its data processing agreement. A copy of the relevant safeguards can be requested using the contact details above.

Cookies and tracking

This release sets no cookies and uses no local storage for analytics. Vercel Web Analytics runs a same-origin measurement script that records anonymous, aggregate page views. It does not support advertising or profile visitors across sites. There is no cookie-consent control because this implementation does not set or read analytics cookies or other browser storage.

Any future measurement that stores or reads non-essential identifiers, supports advertising or tracks people across sites requires consent under the ePrivacy Regulations and Irish Data Protection Commission guidance. This notice, and a working consent mechanism, must be updated before any such feature is enabled.

Your rights

You have the right to request access to the personal data held about you, to have inaccurate data corrected, to have data erased, to have processing restricted, and to object to processing carried out on the basis of legitimate interest. Where processing is carried out by automated means on the basis of consent or a contract, you have the right to data portability; none of the processing described above meets that test today.

In practice, because tool submissions are not retained and hosting logs are not indexed by any identifier we hold, we are usually unable to locate data relating to a specific person from a name or email address alone. If you can identify the request — for example by approximate time and IP address — say so in your request, and we will tell you what can and cannot be found.

Requests are answered within one month. There is no charge for a reasonable request. To exercise any right, use the address on the contact page.

No decision producing legal or similarly significant effects is made about you by automated means. The tools return estimates for your own use; they do not decide anything about you.

Complaints

If you are not satisfied with how a request has been handled, you have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland — dataprotection.ie. If you live or work in another EEA state, you may complain to your local supervisory authority instead.

External links

Official source and provider links lead to independent websites with their own privacy practices. Verdanyx does not send your inputs or your calculated result to those sites. Following a link is a new visit to that organisation, governed by its own notice.

Changes to this notice

Material changes are reflected in the last-updated date above. This notice describes the site as actually deployed; if logging, security services, measurement or partner links change, it is updated in the same release as the change, not after it.