PRIVACY POLICY
Last updated: 2026-09-21
1. Data Controller
QX9.org is an unregistered not-for-profit project. It is operated by a single maintainer, who is the data controller and is reachable at the address below.
Contact: admin@qx9.org
2. What We Collect
a. Website (qx9.org): This site is hosted on GitLab Pages. QX9 does not operate the web server and does not collect or have access to web server access logs. GitLab may collect standard access log data (IP address, user-agent string, requested URL, timestamp) in accordance with its own privacy policy. QX9 does not use analytics, tracking scripts, cookies, or third-party embeds on this site, and its pages load nothing from other sites.
b. Email: If you contact admin@qx9.org, we retain your email address and message content for correspondence purposes.
3. Lawful Basis (GDPR Art. 6)
a. Website hosting: GitLab processes web server data under its own lawful basis. QX9 does not collect or process web server logs.
b. Email correspondence: Legitimate interests (Art. 6(1)(f)) in answering a message you chose to send. Initiating contact is not consent under Art. 4(11), so it is not claimed as one; you can object at any time under Art. 21.
4. Retention
a. Website hosting: QX9 does not retain web server logs. GitLab retains access data per its own retention policy.
b. Email: Retained for the duration of the correspondence or project relationship, then deleted.
5. Sharing
We do not sell personal data, and except as the law requires, we pass it to no one beyond the three services that handle it, each under its own privacy policy: GitLab, which hosts this site and keeps its own access logs (Section 2a); Cloudflare, which receives mail sent to admin@qx9.org and forwards it; and the provider of the mailbox it is forwarded to, which holds correspondence.
6. Your Rights (GDPR / UK GDPR)
If you are in the EEA or UK, you have the right to: access your data, rectify inaccurate data, erase your data, restrict processing, and object to processing. To exercise these rights, contact admin@qx9.org. You also have the right to lodge a complaint with your local supervisory authority.
7. International Transfers
Each of the three services in Section 5 may process the data it handles in the United States or other countries, relying on the safeguards its privacy policy describes; GitLab and Cloudflare cite the EU-U.S. Data Privacy Framework, its UK and Swiss counterparts, and standard contractual clauses.
8. Security
This site is served by GitLab Pages over HTTPS and keeps no account, no database, and no server-side state of its own, so there is nothing here for QX9 to grant access to. Through this site, the only personal data QX9 receives is email correspondence (Section 2b). It is held in the mailbox that admin@qx9.org forwards to, reachable only by the maintainer described in Section 1, over an encrypted connection, and deleted on the schedule in Section 4. Where QX9 operates infrastructure of its own, transport is encrypted and administrative access is held by the same person.
9. Changes
We may update this policy. Changes will be posted at qx9.org with an updated date.
Contact: admin@qx9.org