Privacy statement.

1. Controller

Controller is the party that decides what happens to the data this site handles. Here that is Ephem0ra, company in formation, Switzerland. No postal address is published — there is no registered office until the entry in the commercial register. Until the entity is entered in the commercial register, the responsible person is Michael Soppa, Switzerland.
Contact for all privacy matters: Ephem0ra@proton.me. No data protection officer is appointed. That is the in-house role which supervises how a company handles personal data, and the law only requires it above a certain size or risk; this company is below it.

2. What we collect, and what we do not

Browsing this website sets no cookies, runs no analytics and no tracking of any kind. We do not profile visitors and embed no third-party scripts. The one exception is bounded and named: submitting the contact form hands your message to Netlify Forms, whose spam protection may set cookies for that request. Nothing else on this page stores anything in your browser.

All fonts used on this site are self-hosted. No requests to Google Fonts or other external font services are made, so your IP address is not disclosed to font providers.

3. Hosting (Netlify)

The website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA (or its contracted CDN partners). When you access this site, the hosting provider automatically processes server log data that is technically required to deliver the pages and to secure the infrastructure:

• IP address (in shortened or processed form for security and abuse prevention)
• date and time of the request, requested page, HTTP status
• browser type and operating system (from the user-agent header, the string your browser announces about itself)

The legal basis is legitimate interest in the secure and efficient delivery of this website (GDPR Art. 6(1)(f); under the Swiss revFADP, our and the host's corresponding overriding interest). Legitimate interest means the law allows processing that both sides of this transaction reasonably expect, without a consent dialog first. Logs are retained by the host for the retention period documented in Netlify's trust and security documentation. Netlify's own privacy statement: netlify.com/privacy.

Transfer outside the EU/Switzerland. Netlify, Inc. is a United States company, so delivering this site involves a transfer to a third country. A third country is one that the EU and Switzerland do not rate as holding an equally strong level of data protection on its own. We rely on the transfer safeguards Netlify documents for its own service, namely its privacy statement and its data-processing terms. Those are the contractual and legal tools that keep EU/Swiss-level protection attached to data after it leaves. We add no further recipient and no further purpose. Under the Swiss revFADP the same safeguards are relied on for the transfer.

4. Links to GitHub, PyPI and LinkedIn

Buttons and links pointing to GitHub, PyPI or LinkedIn load no third-party content on this site. Only when you actively follow such a link do the data-protection terms of the respective provider apply.

5. Contact by e-mail

When you contact us by e-mail, we process the data you provide (name, e-mail address, content) solely to answer your inquiry. The legal basis is legitimate interest in responding to requests (GDPR Art. 6(1)(f)) or, where the inquiry leads to pre-contractual steps, meaning the exchange that happens before any contract exists, GDPR Art. 6(1)(b). Criterion for erasure: a thread is kept while the inquiry is open and deleted once it is closed, and no contract, legal dispute or statutory retention duty depends on it. A statutory retention duty is a period in law that forces records to be kept, such as tax rules. No fixed period is stated because the criterion, not the calendar, decides — this satisfies GDPR Art. 13(2)(a).

6. Contact form

The contact form on this website is operated through Netlify Forms. When you send a message, we process the data you enter, name, e-mail address, organization (optional), your stated context and the message text, solely to read and answer your inquiry. The legal basis is answering pre-contractual or general requests (GDPR Art. 6(1)(b) and 6(1)(f); the corresponding overriding interest under the Swiss revFADP).

Submissions are stored by the hosting provider (Netlify) and forwarded to our e-mail inbox (Proton, Switzerland). We do not add senders to any mailing list and do not use the data for profiling. Retention follows the same criterion as in section 5: deleted once the inquiry is closed, unless a contract, a legal dispute or a statutory duty keeps it.

7. Your rights

You have the right to request access to, rectification or erasure of your personal data, to restrict or object to processing, and to data portability, which means receiving your data in a form another service can read (GDPR Art. 15–20; corresponding rights under the Swiss rev-FADP). You may also lodge a complaint with the Swiss authority (the Federal Data Protection and Information Commissioner, FDPIC) or with the supervisory authority of your EU/EEA member state, in practice the national data-protection regulator. To exercise any right, write to Ephem0ra@proton.me.

8. Changes

This statement may be adapted when the service, hosting or legal framework changes. The version date above always reflects the current statement.