Last updated 27 September 2026
Who is responsible
Ampersand Lab is operated by Aaron as sole controller of any personal data it processes. Contact: elinglesdexunqueira@gmail.com.
What is collected
If you only read the site
No account is required. Page counting is optional and starts only after you choose “Allow analytics” in the footer. The site sends a reduced page route and referring site to its first-party adapter, which forwards them to Nanolytics. Account, booking, classroom and sign-in routes are excluded. No visitor ID is used to link pageviews across visits or sites.
The web server and its hosting systems also process request metadata, including network addresses, in operational logs. Their retention is assessed separately from analytics records.
What is recorded for page views
When you allow analytics, the following may be recorded for a page view:
| Item | Details |
|---|---|
| Page path | A reduced public route, e.g. /catalog or /learn/:slug. Query strings are removed; known lesson and reference slugs become route templates. Account, booking and classroom routes are excluded. |
| Referrer site | The site the visitor arrived from, e.g. https://www.google.com. Only the site address is recorded, never the full link. |
| Browser | Unknown in the updated Ampersand adapter; the collector supports a fixed browser family list for other sites. |
| Operating system | Unknown in the updated Ampersand adapter; the collector supports a fixed system family list for other sites. |
| Date and time | When the page was viewed. |
The analytics tables do not store IP addresses or persistent visitor identifiers. The footer choice is stored in this browser for up to 180 days; operational logs can process network addresses. If your browser sends “do not track” or Global Privacy Control, no pageview is sent.
If you create an account
- Identity
- Your name and email address, and whether the address has been verified.
- Authentication
- A hashed password. The plain password is never stored.
- Sessions
- A session record with its IP address and browser user-agent, used to keep you signed in and to limit abuse.
- Learning progress
- Which lessons you have marked complete, so your dashboard can show it.
If you book a lesson
- Booking
- The service, start and end time, and your timezone.
- Payment
- Payment status and the reference returned by the payment provider. Card details are handled entirely by the provider and never reach this server.
- Calendar
- If you connect a calendar, its access credentials are stored encrypted and used only to check availability and write lesson events.
- Classroom
- A record that a session took place. Lessons are not recorded.
Legal basis
- Contract — Article 6(1)(b)
- Account, booking, payment and classroom data, needed to provide the lesson you asked for.
- Legitimate interest — Article 6(1)(f)
- Session records and rate limiting, to keep accounts secure. Weighed against your interests and limited to what is necessary for that purpose.
- Legal obligation — Article 6(1)(c)
- Retaining payment records for the period tax law requires.
- Consent — Article 6(1)(a)
- Optional page counting after you choose “Allow analytics”. Refusal does not affect site access; change or withdraw the choice in the footer.
Cookies
Only strictly necessary cookies are set: a session cookie once you sign in, and a CSRF token. Both are essential to operate an account, so under the ePrivacy Directive they do not require consent.
There are no advertising or third-party analytics cookies. Your optional analytics choice is stored in local storage for up to 180 days so the site remembers your decision. Page counting remains off until you allow it. You can change the decision in the footer.
Sharing
Personal data is not sold, rented or shared for marketing. It is disclosed only to:
- the payment provider you choose, to take payment;
- your calendar provider, if you connect one;
- the email provider used to send verification, password reset and lesson reminder messages;
- a public authority where the law requires it.
The platform is self-hosted in Germany on infrastructure operated by the controller.
How long it is kept
- Optional analytics
- Raw pageview detail is deleted after seven days; daily site totals after thirteen months.
- Account
- Until you delete it. Deletion is available on your profile page and removes your profile and progress.
- Sessions
- Until expiry or sign-out.
- Bookings and payments
- Retained for the period tax and accounting law requires, then deleted.
Your rights
Under the UK GDPR and EU GDPR you may:
- Access — ask for a copy of your data.
- Rectify — correct anything inaccurate; your profile page covers most of it.
- Erase — delete your account, which you can do yourself at any time.
- Restrict — ask that processing be paused while a dispute is resolved.
- Port — receive your data in a machine-readable form.
- Object — object to processing carried out under legitimate interest.
- Withdraw consent — where processing relies on consent.
Email elinglesdexunqueira@gmail.com to exercise any of these. A response is due within one month. You also have the right to complain to your national supervisory authority.
Security
- All traffic is served over HTTPS; plain HTTP is redirected.
- Passwords are hashed, never stored in readable form, and must be at least 12 characters.
- Calendar credentials are encrypted at rest.
- Card details never reach this server.
- Databases are not reachable from the public internet.
Breach notification
A personal data breach that is likely to result in a risk to your rights will be reported to the supervisory authority within 72 hours of becoming aware of it, and to you directly where the risk is high.
Children
The platform is intended for adult learners and accounts are not knowingly created for children under 16. If you believe a child has created an account, contact the address above and it will be removed.