Privacy

Who is responsible for your data

The data controller for this website is Diarmuid Moriarty, established in Cork, Ireland.

Data-protection queries and requests should be sent to diarmuid@verdanyx.com.

No data protection officer is appointed. The processing described below is not large-scale monitoring and does not involve large-scale special-category data, so the statutory appointment criteria are not met.

What is processed, why, and on what basis

Information you enter into a tool

Your entries are sent to a Verdanyx endpoint, used to calculate the result returned to your browser, and then discarded. They are not written to a database, not placed in the page HTML, public files or browser bundles, and not retained after the response is sent.

The lawful basis is our legitimate interest in operating the tool you asked to use (Article 6(1)(f)). The tools do not ask for your name, account numbers or health information, and you should not enter them. One tool can look up a radon risk area from an Eircode or your device's position; that is optional, and it is described next.

A location, only where you ask for one

The radon test priority checker can tell you which area of the EPA's Radon Risk Map of Ireland a home sits in. Doing that needs a point on the ground, so the tool offers two ways to give one: typing the home's Eircode, or letting the browser share this device's position after you press the button that asks for it.

Neither is required. Choosing a county instead, or giving nothing at all, still produces a result, and the result says which of the three it used. Nothing on the page asks a second time after you decline, and no other tool on this site asks for a location.

What happens to it is the important part. An Eircode or a coordinate is sent to one Verdanyx endpoint, used to find which mapped area contains that point, and discarded when the response is written. It is not stored, not written to any log, not placed in the page address, not included in the calculation that follows and not returned to your browser. What comes back is the EPA's published classification for the surrounding area — the same information the EPA's own public map shows for any address — and nothing that identifies the point inside it.

The lawful basis is legitimate interest (Article 6(1)(f)): answering the question you asked, with the least location detail that can answer it and no retention of what you gave. An Eircode identifies a property, which is why it is optional, why it is asked for only where it materially improves the answer, and why it is described here rather than treated as an ordinary form field.

Technical request data

Like every website, the hosting provider processes basic request data: IP address, timestamp, requested route, response status, user agent and referrer. This is used to deliver the page, to detect and stop abuse of the calculation endpoints, and to diagnose errors.

The lawful basis is again legitimate interest (Article 6(1)(f)): the site cannot be delivered, kept available or defended against automated abuse without it. Verdanyx also counts recent requests over a short rolling window to enforce a rate limit.

That counter does not store your IP address. The limiter only needs to know that two requests came from the same source within the window, so the address is converted to a keyed hash and it is the hash that is counted and stored. The raw address is not written to the rate-limit store and cannot be recovered from it. The hosting provider still necessarily sees the address in order to deliver the request, which is described above; this narrows what Verdanyx itself keeps.

Anonymous audience measurement

Verdanyx uses Vercel Web Analytics to count page views and understand which pages are being used. It records anonymous, aggregate information such as the page path, referrer, approximate country or region, device type, browser and operating system. It does not use cookies or local storage, build a cross-site profile, or give Verdanyx a way to identify an individual visitor.

The lawful basis is legitimate interest (Article 6(1)(f)): measuring whether these public tools are found and useful, using the least intrusive configuration available. A temporary visitor identifier used for daily de-duplication is discarded after 24 hours.

Correspondence

If you email a correction or a rights request, that email and its contents are processed to answer you and, where a correction changes a tool, to record why the change was made. The lawful basis is legitimate interest, and legal obligation (Article 6(1)(c)) where the message is a data-protection request we are required to answer.

Who else receives it

• Vercel Inc. hosts the site, runs the calculation endpoints and provides Web Analytics. It processes request and anonymous measurement data on our instructions as a processor, and operates the platform-level security and request-logging services in front of the application.
• The Environmental Protection Agency receives a coordinate pair when you use the radon area lookup, in order to answer which mapped radon area contains it. The request is made by our server rather than by your browser, and carries no identifier, no account and nothing about who asked. The EPA is an Irish public body and its mapping service is public.
• An approved Eircode geocoding providerreceives an Eircode, and only an Eircode, if you choose that route and the site is configured for it. Eircode's address database is licensed, so a coordinate for an Eircode can only be obtained through an approved provider. That request is also made by our server; the provider receives no other information about you or your answers. Where no provider is configured, the route is not offered at all.
• The domain registrar and DNS provider resolve requests for the hostname before they reach the application.
• An email provider handles messages you choose to send to the contact address.

Verdanyx verifies ownership of the site with search-engine webmaster tools, including Google Search Console. Those tools report how the site appears in search results, built from the search engine's own record of its results pages. They receive nothing from your visit: the verification is a static tag in the page source, and no script, cookie or request reaches them when you use this site.

There are no advertising networks or data brokers. Vercel Web Analytics is the only service that measures visits to this site. Verdanyx does not sell personal data or use it for advertising, and does not disclose it except where legally required. See Vercel's Web Analytics privacy documentation.

How long it is kept

• Tool submissions: not retained. They exist only for the lifetime of the request that calculates the result.
• An Eircode or coordinate given to the area lookup:not retained. It exists for the length of the one request that uses it and is never written to storage or to a log.
• Rate-limit counters: a rolling window measured in minutes, after which the counter expires automatically.
• Hosting request and function logs: retained by the hosting provider under the standard retention for the plan in use, which is a matter of days rather than months, and is not extended by Verdanyx. They are used only for security and diagnostics.
• Web Analytics: the temporary visitor identifier is discarded after 24 hours. The remaining page-view statistics are anonymous aggregate reports, not a retained visitor profile.
• Correspondence: kept while the issue is open, then for as long as needed to evidence a correction to a published calculation, and no longer than two years unless a legal claim requires otherwise.

Transfers outside the EEA

The EPA's mapping service is operated in Ireland. Where an Eircode geocoding provider is configured, its own location and safeguards are stated in the contract with it and can be requested using the contact details above.

The hosting provider is a US-headquartered company. Requests are served from EEA infrastructure where the platform configuration allows it, but support, security and administrative access can involve access from outside the EEA. Those transfers rely on the European Commission's standard contractual clauses together with the provider's supplementary technical measures, under its data processing agreement. A copy of the relevant safeguards can be requested using the contact details above.

Cookies and tracking

This release sets no cookies and uses no local storage for analytics. Vercel Web Analytics runs a same-origin measurement script that records anonymous, aggregate page views. It does not support advertising or profile visitors across sites. There is no cookie-consent control because this implementation does not set or read analytics cookies or other browser storage.

Any future measurement that stores or reads non-essential identifiers, supports advertising or tracks people across sites requires consent under the ePrivacy Regulations and Irish Data Protection Commission guidance. This notice, and a working consent mechanism, must be updated before any such feature is enabled.

Your rights

You have the right to request access to the personal data held about you, to have inaccurate data corrected, to have data erased, to have processing restricted, and to object to processing carried out on the basis of legitimate interest. Where processing is carried out by automated means on the basis of consent or a contract, you have the right to data portability; none of the processing described above meets that test today.

In practice, because tool submissions are not retained and hosting logs are not indexed by any identifier we hold, we are usually unable to locate data relating to a specific person from a name or email address alone. If you can identify the request — for example by approximate time and IP address — say so in your request, and we will tell you what can and cannot be found.

Requests are answered within one month. There is no charge for a reasonable request. To exercise any right, use the address on the contact page.

No decision producing legal or similarly significant effects is made about you by automated means. The tools return estimates for your own use; they do not decide anything about you.

Complaints

If you are not satisfied with how a request has been handled, you have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland — dataprotection.ie. If you live or work in another EEA state, you may complain to your local supervisory authority instead.

External links

Official source and provider links lead to independent websites with their own privacy practices. Verdanyx does not send your inputs or your calculated result to those sites. Following a link is a new visit to that organisation, governed by its own notice.

Changes to this notice

Material changes are reflected in the last-updated date above. This notice describes the site as actually deployed; if logging, security services, measurement or partner links change, it is updated in the same release as the change, not after it.