Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Vintage Floppy Disks (vintagefloppydisks.org) collects, uses, and protects information when you visit this website. This website is operated by a private individual based in the European Union and is run for educational and non-commercial purposes.

1. Data Controller

The data controller is the operator of this website. For any privacy-related inquiries, please use the contact form on the Contact page or send an email to info[at]vintagefloppydisks.org.

2. What Data We Collect

This is a read-only, informational website. We do not require visitors to register or create accounts. The following limited data may be collected:

  • Server logs: Your IP address, browser type, referring URL, and pages visited are automatically recorded in standard web server logs. These logs are used solely for security and technical maintenance purposes.
  • Essential cookies: This website sets cookies required for the site to function (e.g. CSRF protection). These are not optional.
  • Analytics cookies: If you consent, Google Analytics sets cookies (_ga, _ga_*) to collect anonymised data about pages visited, session duration, and approximate location (country/city level). No advertising or remarketing data is collected. You can withdraw consent at any time via the Cookie preferences link in the footer.

3. Legal Basis for Processing

  • Server logs: Legitimate interest (Art. 6(1)(f) GDPR) — ensuring website security and stability.
  • Essential cookies: Legitimate interest (Art. 6(1)(f) GDPR).
  • Analytics cookies: Consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via the Cookie preferences link in the footer without affecting the lawfulness of processing carried out before withdrawal.

4. How Long We Keep Your Data

  • Server log files are retained for a maximum of 30 days and then deleted automatically.
  • Contact form messages are kept only as long as necessary to respond to your inquiry and are then deleted.
  • Google Analytics data is retained for 14 months in accordance with the default Google Analytics retention setting.

5. Sharing of Data

We do not sell, rent, or share your personal data with third parties. This website is hosted by a European hosting provider.

If you consent to analytics, anonymised usage data is processed by Google LLC (United States) acting as a data processor under Google's Data Processing Terms. This transfer to a third country is covered by the EU–US Data Privacy Framework. No advertising features or Google Signals are enabled.

6. Your Rights Under GDPR

As a resident of the EU or EEA, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of any personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate data.
  • Right to erasure — you can ask us to delete your data where there is no overriding legitimate reason to keep it.
  • Right to restriction of processing — you can ask us to limit how we use your data.
  • Right to object — you can object to processing based on legitimate interest.
  • Right to data portability — you can request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us via the Contact page. We will respond within 30 days.

7. Right to Lodge a Complaint

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with your national data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

8. Links to External Sites

This website may contain links to external websites (e.g. Instagram). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

9. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies to collect anonymised information about how visitors use the site.

The following measures are in place to minimise data collection:

  • IP anonymisation is enabled — your IP address is truncated before any processing.
  • Google Signals and advertising features are disabled.
  • Analytics only loads after you have given explicit consent.

You can opt out at any time by clicking Cookie preferences in the footer, or by installing the Google Analytics Opt-out Browser Add-on. Google's privacy policy is available at policies.google.com/privacy.

10. Changes to This Policy

We may update this policy from time to time. Any material changes will be reflected with an updated "Last updated" date at the top of this page.