Privacy

What we collect, what we do not, and your rights.

At a glance

Pronix is a static website. We do not embed third-party tracking, do not use marketing cookies, and do not run any external analytics service. We do run a privacy-friendly, self-hosted instance of Matomo for aggregate visit statistics — with first-party cookies, IP-anonymized (last two octets discarded, /16 masking), and respecting your browser’s Do-Not-Track signal.

What we collect

• What you send us by email. When you write to hello@pronix.info or any other published address, we receive the email content and your email address.
• Standard web-server access logs. Our web server records IP address, timestamp, requested URL, HTTP status, and user-agent string for every page view. These logs are kept for a limited period for security and operational analysis, then deleted.
• Privacy-friendly analytics (self-hosted Matomo). We run our own Matomo instance to understand which pages are useful and where the site is rough. The setup is deliberately minimal:
  • First-party cookies. Matomo sets two small first-party cookies (_pk_id.* with a ~13-month visitor ID, _pk_ses.* with a 30-minute session lifetime) to distinguish sessions. No cross-site tracking is possible.
  • Anonymized IP. Your IP address is anonymized on the Matomo server before any processing — the last two octets are discarded (/16 masking, stricter than the EU default of /24).
  • DNT respected. If your browser sends the Do-Not-Track header, the Matomo server discards the tracking hit before it is processed.
  • Self-hosted. The Matomo instance runs on our own infrastructure — no third-party gets your visit data.

What we do not collect

• No third-party analytics. No Google Analytics, no Plausible, no Fathom, no Cloudflare Analytics — none of the external services that send your visits off our infrastructure.
• No third-party embeds that track. No social-media share buttons that load remote scripts, no third-party font-providers that log IPs.
• No newsletter or marketing list. We do not maintain a marketing list. You will not be added to one by visiting the site or contacting us.
• No cross-site or cross-device tracking. First-party Matomo cookies cannot follow you across sites; we do not run any fingerprinting on top.

How we use what we collect

• Email content is used to respond to you and to act on whatever you wrote about — a project inquiry, a question, a support request.
• Access logs are used to detect abusive HTTP traffic (see our Abusive HTTP Watch product for the actual mechanism), to debug occasional server issues, and to size capacity. Logs are not used for profiling.
• Matomo data is used to see aggregate page views, popular content, broken links (404s), and rough geographic distribution at the country level. We do not build profiles of individual visitors — that is structurally impossible given the IP-anonymized, first-party-only setup with no cross-site reach.

Who we share data with

• Nobody, by default. We do not sell, rent, or trade your data.
• No analytics third party. Because Matomo runs on our own infrastructure, no analytics provider gets your data.
• Subprocessors. Email is hosted by our email provider; the web server is hosted by our hosting provider. Both providers have access to the data they need to deliver their service and nothing more. Their privacy practices are governed by their own published policies.

Your rights

You can:

• Ask what we have. Email us and we will tell you.
• Ask us to delete. Email us and we will delete what we can identify as yours, subject to any legal retention obligations.
• Object or restrict. Email us if you want us to stop using your data in a particular way.
• Opt out of analytics. Enable Do-Not-Track in your browser — Matomo on this site honors it. Or block the Matomo domain in your browser; the site works without analytics.

We will respond to such requests within a reasonable time — typically within a few business days.

Data retention

• Email correspondence — kept as long as the engagement with you is active, plus a reasonable archival period. Deleted on request, subject to legal obligations.
• Server access logs — typically retained for 30 to 90 days, then deleted automatically.
• Matomo data — aggregated visit data is retained for up to 12 months. No personal identifier is stored in the first place.

Changes to this policy

We may update this policy. When we do, the lastmod date at the top of the file changes. Material changes will be noted prominently on the site for a reasonable period.

Contact

Questions about this policy: