This policy explains what personal data stagingbench.org handles, why, and what you can do about it. It describes what the site actually does today.
Who is responsible
The controller is the StagingBench Team. Contact for anything in this policy: contact@stagingbench.org.
Visiting the site
No cookies, no analytics, no trackers. The public pages set no cookies and use no JavaScript analytics, advertising scripts, tracking pixels or social media embeds. Fonts and images are served from our own hosting, so loading a page does not contact any third party.
Server logs. Like any web server, our hosting provider's server records each request: IP address, date and time, the page or file requested, status code, data transferred, referring page and browser user agent. We use these logs to keep the site running and secure (for example to investigate errors and abuse) and to see aggregate visit statistics through the hosting control panel. The statistics are not public. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Logs are kept by the hosting provider under its log rotation and then deleted; we do not combine them with newsletter data.
Newsletter
What we store. If you sign up for the monthly results email we store your email address, the role you picked ("I am a..."), the page you signed up on, the times you signed up, confirmed or unsubscribed (UTC), your status (pending, confirmed or unsubscribed), a random token for the confirm and unsubscribe links, and a one-way hash of your IP address (salted SHA-256; we do not store the IP itself). When we send an issue we log the time, the recipient address and whether sending succeeded, so we can fix delivery problems.
Why and on what basis. We use your email only to send the StagingBench results you asked for. The legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the box and confirming the link in our confirmation email (double opt-in). The IP hash and short-lived, hashed rate-limit counters are used only to stop abuse such as mass signups, based on our legitimate interest in protecting the service and third parties (Art. 6(1)(f) GDPR).
Where. In files on our web hosting in the EU (Germany), outside the public website. Emails are sent from our own mail server on the same hosting. We do not use a third-party newsletter or email-sending service.
How long we keep it
- Unconfirmed signups are deleted after 30 days. If you use the unsubscribe link before confirming, the signup is deleted straight away.
- Confirmed subscriptions are kept until you unsubscribe.
- After you unsubscribe we keep your address marked as unsubscribed, with the date, so we do not email you again. Ask us and we delete the record completely, including send-log entries.
- Rate-limit counters only count attempts from the last hour or day; expired counter files are cleared regularly.
- If you email us, we keep the conversation as long as needed to answer and follow up, and delete it on request.
Site administration
A private admin area used only by the StagingBench Team sets a strictly necessary session cookie when an administrator logs in. It is never set for visitors of the public site.
Affiliate and other outbound links
Some outbound links are affiliate links (listed on the disclosure page). StagingBench sets no cookie when you click one. The link adds a referral code to the vendor's address, and the vendor may set its own cookie after the click to attribute a signup to us. That happens on the vendor's site under the vendor's own privacy policy. The same applies to any other external site we link to.
Processors and sharing
Our only processor is our web hosting provider, which hosts the website, the newsletter files, our mailbox and the mail server that sends our emails, in the EU (Germany). We do not sell your data and do not share it with tool vendors, sponsors or advertisers.
Your rights
- Unsubscribe at any time with the one-click link in every email. This also withdraws your consent; it does not affect anything done before.
- Access, correction and deletion. Email contact@stagingbench.org to ask what we store about you, to correct it, or to have it deleted.
- You can also ask us to restrict or object to processing based on legitimate interest, and to receive your newsletter data in a portable format.
- Complaint. You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live, work or think the infringement happened.
Changes
If what the site does with personal data changes, we update this page and the date at the top.