Privacy Policy
This policy explains what personal data appure.dev collects, why it is collected, how long it is kept, and what rights you have over it. It is written to be read, not to be skimmed past.
1. Who is responsible
The controller of your personal data is Appure, operator of the website at appure.dev.
For any question about this policy or your data, write to hello [at] appure.dev. We answer data requests within 30 days, usually much sooner.
2. What we collect and why
This is a static website. There is no account system, no user tracking across sites, no advertising network and no profiling. The data that reaches us falls into three narrow categories.
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Your email and its contents, if you write to us | To answer you and, if it goes further, to prepare and perform a contract | Art. 6(1)(b) - steps prior to a contract |
| Anonymous usage statistics (pages visited, approximate region, device type) | To understand which parts of the site are useful and improve them | Art. 6(1)(a) - your consent, given in the cookie banner |
| Server logs kept by our hosting provider (IP address, timestamp, requested URL) | Security, abuse prevention and diagnosing faults | Art. 6(1)(f) - legitimate interest in a working, secure site |
Providing any of this is voluntary. If you do not consent to statistics and do not write to us, the only record of your visit is the hosting provider's server log.
3. How long we keep it
- Correspondence - for the duration of the enquiry and up to 12 months afterwards, so we can pick up a conversation you return to. Longer if it became a contract, for as long as tax and accounting law requires.
- Analytics - up to 14 months, then deleted automatically by Google Analytics 4.
- Server logs - typically 30 days, per our hosting provider's retention settings.
- Your cookie choice - stored in your own browser for 12 months, or until you clear it. It never leaves your device.
4. Who else sees your data
We do not sell personal data and we do not share it for anyone else's marketing. It is processed only by the service providers we need to run the site and reply to you:
- Our hosting provider - serves the pages and keeps the server logs described above.
- Our email provider - delivers and stores the messages you send us.
- Google (Analytics 4) - only if you consented to statistics. Not loaded at all otherwise.
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
5. Your rights
Under the GDPR you may, at any time:
- ask what data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have your data deleted, where no legal duty requires us to keep it;
- ask us to restrict how we process it;
- receive your data in a portable, machine-readable format;
- object to processing that relies on legitimate interest;
- withdraw consent for analytics at any time - this does not affect anything processed before you withdrew it;
- lodge a complaint with your national data protection authority.
To exercise any of these, email us. We will not ask you to justify the request.
6. Cookies and local storage
The site itself sets no cookies. Your consent choice
is kept in your browser's localStorage, which is not
transmitted to any server. Analytics cookies are set only after you
actively opt in.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
appure-consent |
localStorage (essential) | Remembers your cookie decision so you are not asked on every visit | Until cleared |
_ga, _ga_* |
Cookie (statistics) | Google Analytics 4 - distinguishes visitors and sessions anonymously | Up to 24 months |
Google Consent Mode v2 is configured to denied before the analytics tag can run, so if you decline, no measurement request ever leaves your browser. IP addresses are anonymised by GA4 by default. You can change your mind whenever you like via Cookie settings in the footer.
7. Links to other sites
Where we link out, the linked site's own privacy policy applies from the moment you follow the link. We have no control over what those operators collect.
8. Security and automated decisions
The site is served over HTTPS, and access to correspondence is limited to the people who need it. No fully automated decision-making or profiling with a legal or similarly significant effect on you takes place here.
9. Changes to this policy
If this policy changes materially, the date at the top of the page is updated and, where the change concerns consent, you will be asked again. Previous versions are available on request.