ESTABLISHING LIVE TELEMETRY...

Privacy

Privacy Policy

Last updated: April 2026 (rev. 3)

Data controller

This website (thirdeyefiles.net) is operated by Pablo Núñez Palma. For any privacy-related questions or requests, contact: {email}

Cookies

This website sets no cookies of any kind — neither first-party nor third-party. No consent banner is required or shown.

Analytics

This site uses Umami Analytics (umami.is) to understand how pages are visited. Umami is an open-source, privacy-first analytics platform. It sets no cookies, assigns no persistent identifiers, and does not track individual visitors across sessions or sites.

Only anonymised, aggregated statistics are produced: page views, referral sources, broad geographic regions, and device types. This data cannot be used to identify any individual and does not constitute personal data processing under the GDPR.

Contact form

When you submit the contact form, the following personal data is collected:

  • Your name
  • Your email address
  • The content of your message

Purpose and legal basis. This data is collected solely to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to, or in the context of, a communication you have chosen to initiate.

Data processor. Your submission is transmitted to the site owner’s inbox via Resend (resend.com), a transactional email service. Resend acts as a data processor on behalf of the controller and handles your data only to deliver the message. It is not used for marketing or shared with any other party.

Retention. Your data is retained only for as long as is necessary to handle your enquiry, after which it is deleted.

Spam protection

The contact form uses Cloudflare Turnstile to prevent automated submissions. Turnstile is designed to be GDPR-compliant: it sets no cookies, performs no fingerprinting, and does not collect or process personal data.

Live telemetry ticker

The site displays a live ticker showing local times and weather conditions for a selection of cities, including an approximate location derived from your IP address.

GeoIP lookup. To show your approximate city in the ticker, your IP address is sent to GeoJS (a privacy-focused geolocation service) on your first page load. GeoJS returns a city name and coordinates; your IP is not logged or stored by this site. This processing is based on legitimate interests (Article 6(1)(f) GDPR) — the use is minimal, proportionate, and limited to a single aesthetic feature. GeoJS sets no cookies and does not track visitors.

Weather data. Approximate coordinates are sent to Open-Meteo to retrieve current weather conditions. Open-Meteo is an open-source, privacy-friendly API that sets no cookies, performs no tracking, and does not process personal data.

Session caching. Ticker data is stored in your browser’s sessionStorage for up to one hour to avoid repeated requests. This storage is local to your browser, is not a cookie, and is cleared automatically when you close the tab or browser. No consent is required.

International data transfers

This site is hosted on infrastructure operated by US-based companies. Where personal data is transferred outside the European Economic Area, appropriate safeguards apply:

  • Cloudflare, Inc. — site hosting and spam protection. Cloudflare participates in the EU–US Data Privacy Framework and relies on Standard Contractual Clauses for EEA transfers. See Cloudflare’s Privacy Policy.
  • Umami Software, Inc. — privacy-first analytics. Umami’s cloud infrastructure is based in the US. No personal data is transferred; only anonymised, aggregated statistics are processed. See Umami’s Privacy Policy.
  • Resend, Inc. — email delivery. Resend relies on Standard Contractual Clauses for EEA transfers. See Resend’s Privacy Policy.

Your rights

Under the GDPR (EU 2016/679), you have the following rights regarding any personal data held about you:

  • Access — obtain a copy of your personal data
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data
  • Restriction — limit how your data is processed
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests

To exercise any of these rights, write to {email}. Requests will be handled within 30 days as required by the GDPR.

You also have the right to lodge a complaint with your national data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

Changes to this policy

This policy may be updated if the site’s infrastructure or data practices change. The date at the top of this page reflects when it was last revised.