What we hold about you

The short version: a name and an email address if you open an account, a record of what you paid, and an audience count that cannot identify you. No tracking cookies, no advertising, no third-party analytics, and your IP address is never written down.

Who is answerable

Not yet named on this page. The operator has not published the legal entity answerable for this data. Write to satuchac@gmail.com and you will be told who it is and given everything below.

Anything about your personal data: satuchac@gmail.com

Everything that is stored, and why

This is the whole list, not a summary of it. Reading the site takes nothing from you at all: an account is only needed to buy one.

What	Why	On what basis	Kept
Your name and email address	To have an account at all, to sign you in, and to write to you about what you bought	The contract you asked for	Until you close the account
What you paid, when, and for which plan	To know what you are owed, and because the tax authority requires it	Contract, then a legal obligation	Ten years, which is the accounting rule and not our choice
A blockchain address, where you chose to pay that way	To recognise your payment when it arrives	The contract you asked for	Until you close the account
Which pages were read, and for how long	To know which work is worth continuing	Our legitimate interest in knowing whether the site is read	Aggregated; the daily visitor hash cannot be joined across days
API calls made with your key	To meter the allowance you bought and to keep the service up	The contract you asked for	Per month, alongside the account

Card details are not on this list because they never reach this server. Paying by card happens on Stripe’s own page. We are told that a payment succeeded and for how much, never the number.

Cookies, and why there is no banner

Four cookies exist on this site and every one of them is a step of the sign-in you asked for. Two are the session itself and two live for minutes while a code is entered. There is no advertising cookie, no analytics cookie and nothing from anybody else.

aspern_customerKeeps you signed in to your account. Deleted when you sign out.
aspern_ticketA sign-in half finished: you opened the link and have not yet entered the code. Lasts twenty minutes and is then gone. It is a cookie rather than part of the link because a link gets forwarded, kept in history and pasted into chat windows.
aspern_adminThe operator’s own session. A reader never receives it.
aspern_admin_pendingThe operator’s second factor, for the five minutes it takes to type it. Sent only to the sign-in page and nowhere else on the site.
aspern.session (not a cookie)A random id kept in the tab’s own storage so two pages read in one visit are counted as one visit. It dies when the tab closes and is never sent anywhere else.

A banner is required for storage that is not strictly necessary. Everything above either is the session you asked for or never leaves this site, so there is nothing here to consent to. Asking anyway would be theatre, and clicking through banners that mean nothing is what makes people click through the ones that do.

Your IP address is never written down

Counting readers usually means storing the address that asked for the page. This does not. The address is combined with a secret that changes every day and turned into a hash, and only the hash is stored.

Two consequences, and the second is the one that matters. The hash cannot be turned back into an address. And because the secret is different tomorrow, the same reader on two days produces two unrelated hashes, so nobody — including us — can follow one person across days. It answers “how many read this” and cannot answer “who”.

Who else sees any of it

Four, and each does one job. Nothing is sold, nothing is shared for advertising, and there is no fifth.

StripeTakes card payments on its own page and tells us a payment succeeded.
Our email providerDelivers the sign-in link and the letters about your plan.
Our hosting providerRuns the server the site is on.
Nobody elseNo advertising network, no data broker, no analytics company. The audience count is computed here and stays here.

What you can make us do

These are rights, not favours. Write to satuchac@gmail.com and you get an answer within a month.

See itA copy of everything held about you.
Correct itA wrong name or address, fixed.
Delete itThe account and everything on it. Payment records survive this, because the tax rules require them and we are not free to drop them at will.
Take it elsewhereThe same copy in a machine-readable file.
Object to the audience countSay so and this browser stops being counted. It changes nothing about what you can read.
Complain about usTo the data protection authority where you live, without asking us first. In the Czech Republic that is the Úřad pro ochranu osobních údajů.

What you may do with the figures published here: the licence.

Everything that is stored, and why

This is the whole list, not a summary of it. Reading the site takes nothing from you at all: an account is only needed to buy one.

What	Why	On what basis	Kept
Your name and email address	To have an account at all, to sign you in, and to write to you about what you bought	The contract you asked for	Until you close the account
What you paid, when, and for which plan	To know what you are owed, and because the tax authority requires it	Contract, then a legal obligation	Ten years, which is the accounting rule and not our choice
A blockchain address, where you chose to pay that way	To recognise your payment when it arrives	The contract you asked for	Until you close the account
Which pages were read, and for how long	To know which work is worth continuing	Our legitimate interest in knowing whether the site is read	Aggregated; the daily visitor hash cannot be joined across days
API calls made with your key	To meter the allowance you bought and to keep the service up	The contract you asked for	Per month, alongside the account

Card details are not on this list because they never reach this server. Paying by card happens on Stripe’s own page. We are told that a payment succeeded and for how much, never the number.

Cookies, and why there is no banner

aspern_customerKeeps you signed in to your account. Deleted when you sign out.

aspern_ticketA sign-in half finished: you opened the link and have not yet entered the code. Lasts twenty minutes and is then gone. It is a cookie rather than part of the link because a link gets forwarded, kept in history and pasted into chat windows.

aspern_adminThe operator’s own session. A reader never receives it.

aspern_admin_pendingThe operator’s second factor, for the five minutes it takes to type it. Sent only to the sign-in page and nowhere else on the site.

aspern.session (not a cookie)A random id kept in the tab’s own storage so two pages read in one visit are counted as one visit. It dies when the tab closes and is never sent anywhere else.

Your IP address is never written down

Who else sees any of it

Four, and each does one job. Nothing is sold, nothing is shared for advertising, and there is no fifth.

StripeTakes card payments on its own page and tells us a payment succeeded.

Our email providerDelivers the sign-in link and the letters about your plan.

Our hosting providerRuns the server the site is on.

Nobody elseNo advertising network, no data broker, no analytics company. The audience count is computed here and stays here.

What you can make us do

These are rights, not favours. Write to satuchac@gmail.com and you get an answer within a month.

See itA copy of everything held about you.

Correct itA wrong name or address, fixed.

Delete itThe account and everything on it. Payment records survive this, because the tax rules require them and we are not free to drop them at will.

Take it elsewhereThe same copy in a machine-readable file.

Object to the audience countSay so and this browser stops being counted. It changes nothing about what you can read.

Complain about usTo the data protection authority where you live, without asking us first. In the Czech Republic that is the Úřad pro ochranu osobních údajů.