Privacy Policy

This policy explains what VossWare collects when you use this website, why we collect it, and how long we keep it. It describes the website only. Work we deliver to clients is governed by the agreement for that engagement.

Who is responsible

VossWare operates vossware.org. Questions about this policy, or requests about your information, can be sent to hello@vossware.org.

What we collect

Information you send us

When you email us, book a strategy call, or message us on WhatsApp, you share contact details and whatever you choose to tell us about your project. We keep that correspondence so we can answer you and, if we work together, run the engagement.

Technical information recorded by the website

Our own analytics system records information about page visits and contact-link requests, including:

• The full request URL, including query parameters, the page path, request method, and HTTP status.
• The first page visited during the session.
• The referring URL and referring host, when your browser sends them.
• Your browser's user agent and accepted content types.
• The date and time of the request.
• A session identifier that lets us associate page visits and contact-link clicks within the same browser session.
• Whether the request came from an automated client, and the name of the bot if it did.

If you arrive from a campaign link, the website also records the campaign labels in that link (for example utm_source or utm_campaign) and advertising click identifiers such as gclid, gbraid, wbraid, exenc, or fbclid, when present. Campaign records can also include a network label and a click time decoded from a Google click identifier. These details help us understand which campaigns led to visits and contact-link clicks. We check the format of click identifiers before saving them in dedicated campaign or contact-click fields. The full request URL and referring URL may still contain query parameters.

Session and advertising identifiers do not directly tell us your name, but they link activity and should not be treated as anonymous. Avoid including sensitive information in website URLs.

When you follow a booking or WhatsApp link, we record the type of click, its time, the session identifier, and supported campaign parameters supplied with that request before redirecting you. A click does not tell us whether you completed a booking or sent a message. Our website analytics do not record the contents of conversations on those external services.

Cookies and local storage

The website sets one cookie, _website_session. It keeps your session working and stores session information, including when you first visited and the page you first arrived on. The session also lets us connect visits with campaign and contact-link records. The cookie is marked HttpOnly and uses SameSite=Lax. It is a session cookie; your browser's session-restore settings may preserve it after you close the browser.

We do not load third-party analytics, advertising pixels, or social plugins on this website, so no other cookies are set by us. Links to external services, such as our scheduling provider or WhatsApp, are covered by those services' own policies.

The website does not use local storage or session storage in your browser.

You can block or delete cookies through your browser settings. Doing so may affect session-based features and attribution, but does not stop the server from receiving requests or recording technical information about them.

Why we use it

• To deliver pages and keep the site secure and available.
• To understand which pages and campaigns bring visitors, in aggregate.
• To measure whether contact and booking links are used, so the site can be improved.
• To answer enquiries and prepare proposals you ask for.

Where data protection law requires a legal basis, we rely on our legitimate interest in running and improving a business website and on our contract or pre-contractual steps when you ask for a proposal.

How long we keep it

• A daily cleanup is scheduled to delete raw analytics events older than approximately 31 days. Before deletion they are counted into daily totals that contain no session identifiers, user agents, request URLs, or referring URLs.
• Campaign click records and contact or booking click records, including their session identifiers and campaign details, currently have no automatic deletion period. They remain available for campaign reporting after raw analytics events are removed.
• Daily aggregate totals are retained for historical reporting.
• Enquiry correspondence is kept for as long as needed to handle the enquiry, and longer if we work together or if the law requires it.

Who we share it with

We do not sell your information. We share it only with service providers needed to run the site and answer you:

• Our hosting provider, which serves the site and keeps server logs.
• Our scheduling provider, when you choose to book a call through its own site.
• Our email provider, which delivers and stores messages sent to us.
• WhatsApp, when you choose to contact us there.
• Authorities, when the law requires disclosure.

Recording an advertising identifier in our database does not itself send it back to an advertising platform. The website currently has no integration that uploads these analytics records to advertising platforms. External services receive information when you visit or use them and handle it under their own privacy policies.

Hosting and infrastructure providers may process IP addresses and request logs to deliver and protect the website. Those operational logs are separate from our application analytics and its scheduled cleanup.

International transfers

Some providers process data outside your country. Where that happens, we rely on the transfer safeguards those providers put in place.

Your rights

Depending on where you live, you may have the right to request a copy of your information, correct it, delete it, restrict or object to how it is used, withdraw consent, or receive it in a portable format. Write to hello@vossware.org and we will answer within the period the applicable law requires. You may also complain to your local data protection authority.

Children

This website is intended for businesses and is not directed at children. We do not knowingly collect information from children.

Changes to this policy

We update this policy when what the website collects changes. The date at the top shows the current version.