Privacy
We count which pages get read and keep nothing that tells one reader from another. Here's all of it, including the parts other companies handle.
Who runs the site
Digby Finds belongs to a small Swedish company. That company decides what happens to any data the site handles, which makes it what the GDPR calls the controller.
- Silent Mountain Web Crafts AB, trading as Digby Finds
- Organisation number 559078-9177
- VAT number SE559078917701
- Skogsvägen 15, 611 74 Tystberga, Sweden
- hello@digbyfinds.com
What we count
When you read a page, we write down which page it was, when, and where the visit came from. If another site sent you, that's its name, like google.com, and never the full address. If you came from another page here, it's that page. If the link that brought you here had a utm_source tag on the end (a label some sites add to their links, like utm_source=pinterest), we keep the label too, for the first page you read. Clicking a product link records which product, which page and when.
There are no cookies, nothing is saved in your browser, and we don't keep IP addresses or give readers IDs. So nothing here can tell one reader from another or follow anyone from one visit to the next. It's all counted on our own server, and no analytics company ever sees it.
After 90 days the server rolls each day's records up into daily totals, like "this page, from that site, 12 reads", and deletes the records. The server's daily backups hold them for up to 30 days after that. We also keep our own copy of the records, and that one doesn't expire. It holds what's described above.
The server
The site runs on one server at Fly.io, in Virginia. Your browser has to tell any website its IP address to get a page back, so Fly's network sees it and passes it to our server with the request. Our server doesn't use it and doesn't store it.
The server does keep an ordinary log of the requests it answers: what kind of request it was, the address asked for, whether it worked, how big the answer was and how long it took. The address includes anything on the end of the link that brought you, like a utm_source tag, or the click ID some apps and ad networks add. Fly keeps the log for 7 days. Fly is an American company and follows the EU-US Data Privacy Framework, the arrangement that lets data from Europe be handled in the US.
When something breaks
If the server hits an error, a report goes to Sentry so we find out about it. The report says where in our code it happened and which page was asked for, cut off at the question mark. Everything Sentry could collect about the person reading is switched off: IP address, cookies, browser details and anything the browser sent. Our server strips the report a second time before it leaves. Sentry keeps it in its EU region, in Germany, and nothing from Sentry loads in your browser.
Checking the site is up
Better Stack asks for the home page every three minutes, so we hear about it when the site goes down. It's checking our server, not anybody's visit, and learns nothing about readers.
Amazon
Our product links go to Amazon. Nothing from Amazon loads on our pages, so no Amazon image, script or button is here to set or read cookies while you read. When you follow a product link you're on Amazon's site, and the link tells Amazon you came from us, because that's how we get paid (the affiliate disclosure has the rest). From there Amazon collects information directly from you and sets its own cookies, under its own privacy notice. Amazon's reports to us say what was bought through our links and nothing about who bought it.
There are no ads on this site, from Amazon or anyone else, so there's nothing here to opt out of. Whether Amazon shows you ads based on what you do on its site is set with Amazon, in your account and its privacy notice.
Your rights
The GDPR asks for a reason to handle personal data at all. Ours is legitimate interest, under Article 6(1)(f): knowing which pages get read, and keeping the site running and fixed. The personal data involved is your IP address on its way through the server, plus whatever was on the end of the link you came in on, which sits in the log for a week.
You can ask what we hold about you, ask for it to be corrected or deleted, or object to us handling it, by writing to hello@digbyfinds.com. We'll always answer. Nothing we keep says who a reader is, though, so we've no way to find you in any of it.
If you think we've got this wrong, you can complain to IMY, the data protection authority in Sweden, where the company is based.
If what we collect ever changes, this page changes first.