What I keep

Website: no analytics. One cookie, only if you pick a background: it holds the name of the time of day and nothing else. The web server logs your IP address, the time and the page.

Account: your handle, how you sign in (never a password), what you can access, and a log of account actions. id.wavedash.eu has the details.

Mail: stored on my server. I can read it as the administrator, and I don't. The mail server also logs connections and addresses, never content.

Git: your repositories and what you push, and a Forgejo account made from your sign-in: handle, name, a made-up email address and whatever else you add. It's kept on a machine at my home, on local storage that isn't encrypted.

For how long

Logs are kept for 30 days at most. Mail and sign-in are backed up every night, encrypted, to a machine I own, and those backups are deleted after 60 days at most. Git has its own nightly copies on other disks of that machine, not encrypted, deleted after 14 days.

Who else sees it

Nobody. I don't sell or share any of it. Mail and sign-in run on a server rented from UpCloud, with storage encrypted at rest. Git runs on a machine at my home. If you sign in with Discord, Discord knows you used the service.

Your rights

Download, correct or delete your data on your account page. Deleting removes your mailbox and its mail, and your handle stays reserved for 3 days. Your git account and repositories are not removed by that: write to me and I'll delete them. You can also ask me to restrict how I use your data, or complain to the Polish data protection authority (UODO).