Privacy

This page explains what this website records about visitors, why, and what you can ask us. Last updated 22 October 2026.

Who is responsible

SPINUNIT OÜ (registry code 14172199), Patika tee 31, Patika küla, Rae vald, 75316 Harju maakond, Estonia. spin@spinunit.org

Write to this address for anything on this page.

Visit statistics

We count visits with a small script of our own, to see which pages are read and where readers come from. It sets no cookies and does not store your IP address.

For each page view we store:

• the page address (without anything after a “?”) and whether the page was found
• the site that linked to the page, if any
• campaign tags in the address (utm_source, utm_medium, utm_campaign)
• country, region and city, as estimated by our host from the connection
• the kind of device, browser and operating system
• screen width and browser language
• how long the page was open (up to 30 minutes) and how far it was scrolled
• which file you downloaded or which outside link you followed (its address only)

To count visitors within a day, the script makes a code from the date, the site, your IP address and your browser’s description, using a secret key. The code changes every day, so we cannot tell that two visits on different days were the same person. The IP address and the browser description are not stored.

Automated traffic (search robots, test browsers) is not counted. The statistics are stored by Cloudflare in the European Union and deleted after 25 months.

To opt out, add #notrack to the address of any page, for example https://spinunit.org/#notrack. Your browser then remembers not to send statistics to this site. Add #track to undo it.

Hosting and security

Cloudflare, Inc. hosts this site. To deliver pages and protect them from attacks, Cloudflare processes your IP address and the details of each request, and keeps request logs for a short time. Cloudflare acts on our behalf and is certified under the EU–U.S. Data Privacy Framework.

Content from other services

The pages of spinunit.org load their fonts, scripts and images from this site, not from other services.

Some working pages we publish under /dashboard/, such as maps and presentations, load map tiles, fonts or code libraries from other services, for example OpenStreetMap or jsDelivr. Those services receive your IP address when such a page loads.

Things stored in your browser

• Password-protected pages. After you enter a page’s password, a cookie (cpw_…) keeps you signed in to that page for 30 days. It holds proof of the password, not who you are.
• Display choice. The projects page remembers whether you chose the list or the grid (spin-view). It stays in your browser and is not sent to us.
• Opt-out. If you used #notrack, your browser keeps that choice (_notrack).

Files shared by link

We sometimes give clients a link to download a file from files.coplanai.com. The file is stored in the European Union until we delete it, and the link stops working when it expires. We do not record who downloads it; Cloudflare’s short-term request logs apply.

If you write

We use your email to answer you and keep it as long as the exchange is useful for our work.

Why this is allowed

• Statistics, hosting and security: our legitimate interest in running the site safely and knowing what is read (GDPR Article 6(1)(f)).
• Password cookies: they are needed to show the page you asked to open.
• Email: our legitimate interest in answering you, or the steps you asked for before an agreement.

We do not sell data, show advertising or build profiles of visitors.

What you can ask

You can ask to see, correct or delete data about you, to restrict its use, or object to it. Because the visitor code changes daily and no IP address is kept, we usually cannot find statistics that belong to one person; write to us and we will check what we hold.

You can also complain to the data protection authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).