# PrivacyWhat we collect, what we do not, and your rights.

## At a glance

Pronix is a static website. We do not embed third-party
tracking, do not use marketing cookies, and do not run any
external analytics service. We do run **a privacy-friendly,
self-hosted instance of Matomo** for aggregate visit statistics
— with first-party cookies, IP-anonymized (last two octets
discarded, /16 masking), and respecting your browser's
Do-Not-Track signal.

## What we collect

- **What you send us by email.** When you write to
  `hello@pronix.info` or any other published address, we receive
  the email content and your email address.
- **Standard web-server access logs.** Our web server records
  IP address, timestamp, requested URL, HTTP status, and
  user-agent string for every page view. These logs are kept
  for a limited period for security and operational analysis,
  then deleted.
- **Privacy-friendly analytics (self-hosted Matomo).** We run
  our own Matomo instance to understand which pages are useful
  and where the site is rough. The setup is deliberately
  minimal:
  - **First-party cookies.** Matomo sets two small first-party
    cookies (`_pk_id.*` with a ~13-month visitor ID, `_pk_ses.*`
    with a 30-minute session lifetime) to distinguish sessions.
    No cross-site tracking is possible.
  - **Anonymized IP.** Your IP address is anonymized on the
    Matomo server before any processing — the last two octets
    are discarded (/16 masking, stricter than the EU default
    of /24).
  - **DNT respected.** If your browser sends the Do-Not-Track
    header, the Matomo server discards the tracking hit before
    it is processed.
  - **Self-hosted.** The Matomo instance runs on our own
    infrastructure — no third-party gets your visit data.

## What we do not collect

- **No third-party analytics.** No Google Analytics, no
  Plausible, no Fathom, no Cloudflare Analytics — none of the
  external services that send your visits off our infrastructure.
- **No third-party embeds that track.** No social-media share
  buttons that load remote scripts, no third-party
  font-providers that log IPs.
- **No newsletter or marketing list.** We do not maintain a
  marketing list. You will not be added to one by visiting the
  site or contacting us.
- **No cross-site or cross-device tracking.** First-party
  Matomo cookies cannot follow you across sites; we do not run
  any fingerprinting on top.

## How we use what we collect

- **Email content** is used to respond to you and to act on
  whatever you wrote about — a project inquiry, a question, a
  support request.
- **Access logs** are used to detect abusive HTTP traffic (see
  our [Abusive HTTP Watch](/portfolio/abusive-http-watch/)
  product for the actual mechanism), to debug occasional server
  issues, and to size capacity. Logs are not used for
  profiling.
- **Matomo data** is used to see aggregate page views, popular
  content, broken links (404s), and rough geographic
  distribution at the country level. We do not build profiles
  of individual visitors — that is structurally impossible
  given the IP-anonymized, first-party-only setup with no
  cross-site reach.

## Who we share data with

- **Nobody, by default.** We do not sell, rent, or trade your
  data.
- **No analytics third party.** Because Matomo runs on our own
  infrastructure, no analytics provider gets your data.
- **Subprocessors.** Email is hosted by our email provider; the
  web server is hosted by our hosting provider. Both providers
  have access to the data they need to deliver their service
  and nothing more. Their privacy practices are governed by
  their own published policies.

## Your rights

You can:

- **Ask what we have.** Email us and we will tell you.
- **Ask us to delete.** Email us and we will delete what we can
  identify as yours, subject to any legal retention obligations.
- **Object or restrict.** Email us if you want us to stop using
  your data in a particular way.
- **Opt out of analytics.** Enable Do-Not-Track in your browser
  — Matomo on this site honors it. Or block the Matomo domain
  in your browser; the site works without analytics.

We will respond to such requests within a reasonable time —
typically within a few business days.

## Data retention

- **Email correspondence** — kept as long as the engagement
  with you is active, plus a reasonable archival period.
  Deleted on request, subject to legal obligations.
- **Server access logs** — typically retained for 30 to 90
  days, then deleted automatically.
- **Matomo data** — aggregated visit data is retained for up
  to 12 months. No personal identifier is stored in the first
  place.

## Changes to this policy

We may update this policy. When we do, the `lastmod` date at
the top of the file changes. Material changes will be noted
prominently on the site for a reasonable period.

## Contact

Questions about this policy: [hello@pronix.info](mailto:hello@pronix.info)