Privacy Policy

Data Controller

Marcus Hernandez Email: privacy@ondatra.sh

What Data We Process and Why

Website (ondatra.sh)

When you visit this website, the following data is processed automatically to deliver the pages to your browser:

  • IP address
  • Date and time of your visit
  • Pages requested
  • Browser information

We use Simple Analytics for privacy-first website analytics. No cookies. No personal data collected.

Contact Form

Using the contact form is entirely voluntary. When you choose to send a message, the following data is processed:

  • Name: to know who we are communicating with
  • Email address: to reply to your message
  • Subject and message: to understand your inquiry

The message is delivered to our inbox by our own contact form service and mail server. It is not stored in any database on this website. We retain the email only as long as necessary to handle your inquiry.

OndatraSQL CLI

The CLI runs entirely on your machine. It does not send telemetry, usage data, or analytics, and it makes no requests to ondatra.sh or any other service run by us. The only network requests it makes are to the third-party APIs and storage you configure yourself.

We do not use any personal data for marketing, profiling, or any other purpose. No automated decision-making takes place.

We process your personal data based on legitimate interest (GDPR Article 6(1)(f)). We consider this processing to be expected by you when you visit the website or send us a message.

Third-Party Services

We use the following services that process data on our behalf (data processors):

  • Bunny.net: website delivery. Processes hosting data. Based in the EU (Slovenia).
  • Our own servers (Hetzner, Finland; GleSYS, Sweden): the contact form service and the mail server that deliver and store contact form messages. Based in the EU.
  • Simple Analytics: website analytics. No personal data processed. Based in the EU (Netherlands).

We do not share your data with any other third parties.

Transfers Outside the EU/EEA

All data processing takes place within the EU/EEA. We do not transfer personal data to countries outside the EU/EEA.

Data Retention

  • Hosting data: Bunny.net retains access logs in accordance with their data retention policies
  • Contact form messages: kept only as long as necessary to handle your inquiry

Security

All communication with this website and our services is encrypted via HTTPS.

Your Rights

Under the GDPR, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate data
  • Erasure: request deletion of your data
  • Restriction: request that we limit how we process your data
  • Objection: object to our processing based on legitimate interest
  • Data portability: receive your data in a structured, commonly used format

To exercise any of these rights, contact us at privacy@ondatra.sh.

Supervisory Authority

If you believe your data has been processed in violation of the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se

Cookies and Tracking

This website does not use cookies or any tracking technologies.

Changes

We may update this policy. Changes will be posted on this page with an updated date.

Last updated: October 6, 2026