// legal / privacy policy

Privacy Policy

Effective date: April 7, 2026 · pl90.com · Lazer

$Short version: I don't sell your data, don't track you across the web, and don't share information with anyone unless legally required. The contact form collects what you type plus technical context disclosed in full below.

1. Who This Applies To

All visitors of pl90.com and anyone submitting the contact form. Operated by Lazer, an independent software developer (handle: pl90).

2. What Is Collected

2a. Information You Provide

Name — as entered
Email — used solely to reply
Subject — if provided
Message content

2b. Technical Metadata (on form submission)

Data Point	What It Is	Why Collected
IP Address	Your public internet address	Security, spam prevention, geographic context
City / Region / Country	Approximate location via IP	Geographic context
Postal Code	Approximate area via IP	Geographic context
Latitude / Longitude	City-level coordinates via IP (not GPS)	Geographic context
ISP / Organisation	Your internet provider or network org	Security, network context
ASN	Autonomous System Number	Security, VPN/hosting detection
Timezone	Timezone derived from IP	Communication context
Browser User Agent	Browser name, version, OS string	Technical context
Browser Language	Primary language setting	Communication context
All Accepted Languages	Full browser language list	Communication context
Platform / OS	Operating system as reported by browser	Technical context
Browser Vendor	Browser vendor string	Technical context
Screen Resolution	Display pixel dimensions	Device context
Colour Depth	Bits per pixel	Device context
Viewport Size	Visible browser window dimensions	Device context
Device Pixel Ratio	Retina/high-DPI indicator	Device context
Colour Scheme	Light or dark mode preference	Device context
Touch Support	Whether device has touch input	Device type context
Max Touch Points	Simultaneous touch points	Device type context
Hardware Concurrency	Logical CPU cores	Device capability
Device Memory	Approximate RAM in GB	Device capability
Connection Type	Network type (WiFi, 4G, etc.)	Context
Connection Speed	Estimated download speed	Context
Cookies Enabled	Whether browser accepts cookies	Security context
Do Not Track	Browser DNT setting	Transparency
Page URL	URL submitted from	Context
Referrer URL	Previous page visited	Traffic source context
Page Title	Title of page at submission	Context
Form Load Timestamp	When page was loaded (UTC)	Timing, security
Submit Timestamp	Exact submission time (UTC)	Record keeping, security
Time on Page	Seconds before submitting	Bot detection
Session ID	Random identifier for this session	Security, deduplication
Terms Agreement	Whether agree box was checked	Consent record
Agreement Timestamp	When agree box was checked (UTC)	Consent record

$Location data from IP is city/region level only. Not GPS. Not your exact location.

3. How It Is Used

Used exclusively to:

Read and respond to your message
Detect and prevent spam, bots, and abuse
Maintain a contact record for follow-up
Understand in general terms how visitors reach the site (non-commercial)

Your information is never sold, rented, or traded. Never used for advertising, retargeting, or marketing. Never shared with data brokers or analytics platforms.

4. Third-Party Services

Formspree

Form submissions are processed by Formspree. All submitted data (including metadata) is transmitted to their servers before delivery to me. Their Privacy Policy governs their handling of that data.

ipapi.co

Geographic and network context is fetched from ipapi.co. This exposes your IP to their servers. Their Privacy Policy applies.

Google Fonts

Typography is served by Google Fonts. Google may receive basic request data including your IP. See Google's Privacy Policy.

No analytics, tracking scripts, ad networks, or other third-party services are used.

5. Cookies & Local Storage

This Site does not use cookies for tracking, analytics, or advertising. sessionStorage is used locally in your browser for rate limiting on form submissions. It never leaves your browser and is cleared when you close the tab. No persistent cookies. No tracking pixels.

6. Data Retention

Messages are retained as long as reasonably necessary to respond and follow up. To request deletion, use the contact form. One person. No bureaucracy. It will be handled promptly.

7. Your Rights

Access to personal data held about you
Correction of inaccurate data
Deletion of your data (right to erasure)
Object to or restrict processing
Data portability
Lodge a complaint with a supervisory authority (e.g. the ICO in the UK, relevant DPA in the EU)

To exercise any right, use the contact form.

8. Legal Basis (GDPR)

Consent — by checking the agreement box, you explicitly consent to collection and processing described here.
Legitimate interests — security measures (honeypot, rate limiting, timing) are necessary to protect the Site from abuse.

You may withdraw consent at any time by requesting data deletion.

9. Security

HTTPS encryption on all data in transit
Four honeypot fields catching automated bot submissions
Timing analysis rejecting submissions completed too quickly
Client-side rate limiting via sessionStorage
Server-side CAPTCHA verification via Formspree
Per-field input validation before submission

10. Children's Privacy

This Site is not directed at children under 13 (or 16 where applicable). Contact me to remove any such data without delay.

11. Changes

The effective date at the top reflects the most recent revision. Continued use constitutes acceptance of changes.

12. Contact

Questions or requests? Use the contact form. Real human. No ticket numbers.