Privacy Policy

This page explains what personal information I collect, how it’s used, and what control you have over it when using frankgrivel.nl.

If you don’t agree with this, please don’t use the site. If you have any questions or would like to request more information, feel free to contact me.

What information I collect (and where it comes from)

Account information (stored in the database)

When you create an account or log in, I store your username, email address, and a password hash (never the actual password). This is used only for account creation, login, and account management.

Session & cookie data

The site uses PHP session cookies to keep you logged in, plus cookie consent preferences and basic functional cookies required for the site to work. No tracking or advertising cookies are set without consent.

For details, see the Cookie Policy.

Technical and log data

Like most websites, the server automatically logs technical information such as your IP address, browser/device type, requested pages and timestamps, and basic error/performance info. I use this for security, diagnostics, and abuse prevention. These logs are not used to profile you.

Analytics (optional)

If enabled and accepted via cookies, I may use Google Analytics to understand general usage trends. This is used in aggregated form and is not intended to identify you personally.

For details and how to opt out, see Google Analytics.

How I use this information

I use collected data only to:

• Run the website and its features
• Manage user accounts
• Keep the site secure
• Fix bugs and improve performance
• Comply with legal obligations if required

I don’t use your data for advertising, resale, or unrelated purposes.

How long data is kept

• Account data:
  Kept as long as your account exists.

• Session data:
  Deleted automatically when sessions expire or when you log out.

• Server logs:
  Kept for a limited time for security and diagnostics.

• Analytics data:
  Retained according to Google’s retention settings (if enabled and accepted).

You can request deletion of your account and related data at any time.

Legal basis (plain English)

If you’re in the EU or UK, data protection law requires a reason to process personal data. In practice, that usually means: you created an account and expect the site to work, processing is necessary to provide the service, there’s a legitimate interest (security/stability), or I’m legally required to keep certain records.

Sharing your data

I don’t sell or rent personal data.

Your data is only shared if:

• Required by law
• Necessary due to hosting or infrastructure changes
• The site is transferred or restructured in the future

International processing

The site may be hosted on servers outside your country. If so, your data may be processed there, but I still handle it according to applicable data-protection rules.

Security

I use reasonable technical and organisational measures to protect your data (for example password hashing, access controls, and limiting exposure). That said, no website can guarantee absolute security.

Children

This site is not intended for users under 18, and I don’t knowingly collect data from minors.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data. Please send requests through my contact form.

Do Not Track

Some browsers send “Do Not Track” signals. There’s no consistent standard for these signals, so the site doesn’t specifically respond to them.

Changes to this notice

This notice may be updated occasionally. The latest version will always be published on this page.

Contact

Questions, data requests, or deletion requests are welcome here: contact me.