Privacy policy

This policy explains what personal data SiPoly (sipoly.si) handles, why, and what your rights are. We collect as little as we can.

Who is responsible

The controller is Bhanu P, the publisher of SiPoly. For any privacy question or request, use our contact form: choose “General enquiry” and mention privacy. We do not publish an email address.

What we collect and why

  • Contact and corrections form: the type of request and your message, plus anything you choose to add: your name, email address, relationship to the claim, an evidence link and the claim you are writing about. We also record when you sent it. We use this only to handle your request and, if you gave an email address, to reply. Legal basis: our legitimate interest in keeping the site accurate and answering messages (GDPR Article 6(1)(f)); optional details are given with your consent (Article 6(1)(a)).
  • Spam protection: to limit abuse of the form, we keep a one-way hash of your IP address for one hour to count submissions. We do not store the IP address itself.
  • Server logs: our hosting provider, Hostinger, keeps standard web-server logs (such as IP address, browser and the pages requested) to run and secure the service.
  • Visit statistics (Google Analytics 4): how many people visit and which pages they read. See “Google Analytics” below. Analytics cookies are only set if you click Accept.
  • Nothing else: SiPoly has no visitor accounts, comments or newsletters.

Google Analytics

We use Google Analytics 4, a service from Google, to count visits and see which pages are read, so we know what is useful. We have set it up with Google Consent Mode, and analytics storage, ad storage, ad user data and ad personalization all start as denied.

  • If you click Accept, Google Analytics may set its cookies (_ga and _ga_<ID>, which last up to two years) and collects information such as the pages you view, how you arrived, your device and browser type, and an approximate location. Legal basis: your consent (GDPR Article 6(1)(a)).
  • If you click Reject, or until you choose, no analytics cookies are set. The Google tag still loads and, as Google describes for Consent Mode, may send Google limited cookieless signals (for example that a page was viewed and the consent choice).
  • Google says Google Analytics does not log or store IP addresses from EU users. Google acts as our data processor for Google Analytics under its data processing terms, and may process data outside the EU under the safeguards described in those terms.
  • We keep Google Analytics data for the retention period set in our Google Analytics account, which is at most 14 months for user-level data.
  • Changing your mind: use the Cookie settings link at the bottom of every page and choose Reject. This removes the Google Analytics cookies from this site; you can also delete cookies in your browser. Your choice is stored in your browser (local storage, key sp_consent), not on our server.

Cookies

Technical cookies: WordPress sets no cookies for visitors who simply read the site. Our caching software, LiteSpeed Cache, may set a small technical cookie called _lscache_vary that tells the cache which version of a page to serve; it is not used to identify or track you. If you log in to the site’s admin area, WordPress sets the cookies needed to keep you logged in.

Analytics cookies: _ga and _ga_<ID> from Google Analytics, only after you click Accept (see above).

We will update this policy, and ask for your consent where the law requires it, before we introduce any advertising or other non-essential cookies.

Who else sees your data

  • Google receives the visit statistics described above, as our processor for Google Analytics.
  • Hostinger hosts the site and processes data for us under its data processing terms. Some of its service providers are outside the EU; Hostinger says such transfers are covered by the European Commission’s standard contractual clauses.
  • Backups of the site, which can include form messages, are kept so the site can be restored after a fault.
  • Nobody else. We never sell your data or pass it to the people we track. We do not publish your email address. We do not publish your name unless you are the claimant (or speak for them) and send a reply on the record, in which case we may summarize or quote it on the claim page.
  • Share buttons are plain links: nothing is loaded from X or LinkedIn until you click one.

How long we keep it

  • Form messages: while they are relevant to a claim, and deleted within 12 months after the request is resolved. Ask us and we will delete yours sooner.
  • IP hashes for spam protection: one hour.
  • Server logs: according to Hostinger’s retention schedule.
  • Google Analytics data: the retention period set in our Google Analytics account (at most 14 months for user-level data).
  • Backups: only as long as needed to restore the site.

Your rights

Under the GDPR you can ask to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, write to us through the contact form. We will reply within one month.

You also have the right to complain to a data protection authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si. You can also complain to the authority in the EU country where you live or work.

Changes

If we change this policy, we will update this page and the date below.

Last updated: October 2026.