Privacy policy

Who is responsible

This site and the applications described on it are made by Dimitrios T, an individual based in Athens, Greece. For the purposes of the UK and EU General Data Protection Regulation, that individual is the data controller. There is no company, no team, and no data protection officer — a DPO is not required at this scale.

The way to reach the controller about anything on this page is hello@flosforge.eu. That address is a personal inbox.

What this website collects

The site is a set of static files. There is no server logic, no database and no login. Four things are worth naming individually.

Hosting logs

Serving a page requires your browser to make a request, and the host that answers it keeps ordinary server logs — IP address, timestamp, the file requested, user agent. These are created by the act of visiting any website and are used for delivering the site and for security. They are not combined with anything else, not used to build a profile, and not something the controller reads routinely.

Your browser’s own storage

Two preferences are kept in your browser and never transmitted anywhere: the light or dark theme you chose, and — if you were asked — your answer about analytics. Both live in localStorage, which unlike a cookie is never attached to a request. Clearing site data for this domain removes both.

Analytics, if you allow it

If, and only if, you press Allow analytics, this site loads Google Analytics 4 from Google. Until then nothing is requested from Google, no Google cookie exists, and Google is not told that you were here.

Once allowed, it records the ordinary things an analytics tool records:

• which pages were viewed, in what order, and for how long;
• an approximate location derived from your IP address — country, region, city;
• device, browser and screen size;
• which site or search sent you here, if any.

Your full IP address is used by Google to derive that approximate location and is not written into the reports the controller can see. What the controller sees is aggregate: counts of page views, not a list of visitors. There is no advertising integration, no remarketing, no Google Signals, no user-provided data and no cross-site identifier. The cookie policy lists the exact cookies and how long each lasts.

Legal basis: your consent, under Article 6(1)(a) GDPR and the ePrivacy Directive as implemented in Greek law. You can withdraw it at any moment from Cookie choices in the footer of every page; doing so deletes the cookies and stops any further collection. Refusing or withdrawing costs you nothing — no part of this site is behind it.

Google acts as a processor for this data and may transfer it outside the EEA, relying on the EU–US Data Privacy Framework and Standard Contractual Clauses. Google’s own description of how it handles Analytics data is at business.safety.google/privacy, and it retains event-level data for 2 months.

Email you send

If you write to hello@flosforge.eu, that message and your address arrive in a personal inbox and go nowhere else. They are not added to a mailing list — there is no mailing list — and are kept only as long as the conversation is useful. Legal basis: legitimate interest in answering someone who wrote to me, under Article 6(1)(f).

The support form

The support page shows a form hosted by Tally (Tally BV, Belgium), along with a small script of Tally’s that sizes the form to fit the page. Both load only on that page, and only when you open it; no other page on this site contacts Tally. Opening it lets Tally see what any website sees — your IP address and browser. What you type into it, plus the name of the application it is about, is stored by Tally and passed on to Notion (Notion Labs, Inc., United States), where the controller keeps track of support requests. The form uses Google reCAPTCHA to keep out spam, so opening it also sends Google the signals reCAPTCHA reads to tell a person from a bot.

It is used to answer your request and for nothing else: not added to a mailing list, and kept only as long as the conversation is useful. Legal basis: legitimate interest in answering someone who asked for help, under Article 6(1)(f). Tally and Notion act as processors. Tally stores form data in the EU; its own policy is at tally.so/help/privacy-policy. Notion may hold it outside the EEA, relying on the EU–US Data Privacy Framework and Standard Contractual Clauses; its policy is at notion.so.

The notify-me form

The notify-me page shows a second Tally form, with the same sizing script, loaded only on that page and only when you open it. It asks for your email address and receives the name of the application you are waiting for. Tally stores both.

The address is used to send you one email when that application is published, and for nothing else: not added to a mailing list, not shared, and deleted once that email has gone out. Legal basis: consent, under Article 6(1)(a), which you give by submitting the form and can withdraw at any time by writing to hello@flosforge.eu. Tally acts as a processor and stores form data in the EU.

The collaborations form

The collaborations page shows a third Tally form, with the same sizing script, loaded only on that page and only when you open it. What you type into it is stored by Tally.

It is used to reply to your enquiry and, if it goes further, to discuss and carry out the collaboration it is about, and for nothing else: not added to a mailing list, not shared, and kept only as long as the conversation is useful, or as long as any resulting agreement requires. Legal basis: steps at your request before entering into a contract, under Article 6(1)(b), and otherwise legitimate interest in answering someone who wrote to me, under Article 6(1)(f). Tally acts as a processor and stores form data in the EU.

What the applications collect

Nothing. No FlosForge application has an account system, sends telemetry, reports crashes, or contains analytics — not switched off by default, absent. Each one keeps its data on hardware you control — your own disk, or your own server — and the network requests each makes are limited to the job it was asked to do.

• WinLevers for Windows — Windows. Reads only the machine it is running on, or the device you connect to it. No AI. Read the WinLevers for Windows privacy policy.
• Phone Checker for Android — Windows, macOS, Linux. Reads only the machine it is running on, or the device you connect to it. No AI. Read the Phone Checker for Android privacy policy.
• FlosForge Caller for macOS, Windows and Linux — macOS, Windows, Linux. Reads only the machine it is running on, or the device you connect to it. No AI. Read the FlosForge Caller for macOS, Windows and Linux privacy policy.
• FlosForge ArEm Buddy for reMarkable tablets — macOS, Windows, Linux. Reads only the machine it is running on, or the device you connect to it. No AI. Read the FlosForge ArEm Buddy for reMarkable tablets privacy policy.

Your own API keys

Where an app can talk to a cloud AI provider, that is off until you turn it on and enter your own key. The key is yours: your account, your billing relationship. It is stored in your operating system’s keychain, never proxied through anything the controller runs, and never seen by anyone but you and the provider you chose.

Who else sees any of this

Google, for analytics, and only if you allowed it. Tally, for what you submit through the support, notify-me and collaboration forms, and Notion for support requests, and Google again for that form’s spam check. The hosting provider, unavoidably, as a consequence of serving files. Nobody else. Nothing is sold. Nothing is shared for advertising. Nothing is used to build a profile of you, here or anywhere else. There is no data broker in this picture because there is no data worth broking.

How long anything is kept

• Your theme and consent choices — in your browser, until you clear site data.
• Analytics — Google retains event-level data for 2 months; the cookies expire as listed in the cookie policy.
• Hosting logs — for the short period the host keeps them, typically days.
• Email and support requests — as long as the conversation is useful, then deleted.

Your rights

Under the GDPR you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without that withdrawal affecting what was lawful before it.

In practice, most of these are already in your own hands here. Analytics is withdrawn with one click in the footer. Everything else in your browser is cleared by clearing site data. For anything held in email, write to hello@flosforge.eu and it will be dealt with within one month, as the regulation requires.

If you are not satisfied with how a request was handled, you may complain to your local supervisory authority. In Greece that is the Hellenic Data Protection Authority.

Children

This site is aimed at developers and system administrators and is not directed at children. No age is collected, and nothing here is designed to appeal to a child.

Trademarks and affiliation

FlosForge is an independent, one-person project. It is NOT affiliated with, endorsed by, sponsored by, certified by, approved by or connected in any way to any of the companies or organisations named below, or to any other company whose products, services or trademarks appear anywhere on this site or inside its screenshots. None of them has reviewed, approved or supported this software, and no such relationship is claimed or implied. Their names appear here for one reason only: to identify the software the pages are talking about.

Apple Inc.

Apple, macOS, Mac, the Mac App Store, Touch ID, Keychain and Apple Intelligence

Microsoft Corporation

Microsoft, Windows, Visual Studio, WinUI and .NET

Google LLC

Google, Android, Google Play, Google Drive, Health Connect and Gemini

Samsung Electronics Co., Ltd.

Samsung, Galaxy, Samsung Health and S Pen

the WordPress Foundation

WordPress

Linus Torvalds

Linux, registered in the U.S. and other countries

The MITRE Corporation

CVE (registered trademark) and CWE

Docker, Inc.

Docker

the OpenJS Foundation

Node.js and Electron

Cloudflare, Inc.

Cloudflare and R2

Amazon.com, Inc. or its affiliates

Amazon Web Services, AWS and Amazon S3

GitHub, Inc.

GitHub

the OpenStreetMap Foundation

OpenStreetMap

Yoast BV

Yoast

reMarkable AS

reMarkable, reMarkable 2 and reMarkable Paper Pro

cURL, Python, Ollama, Backblaze, Wasabi, MinIO, GeoNames, OpenTopoMap, NVD (National Vulnerability Database), the security advisory databases named on the project pages, and every other product, brand or company name shown on this site or inside its screenshots are the property of their respective owners. This product uses data from the NVD API but is not endorsed or certified by the NVD. Each mark is used nominatively — to identify the software, platforms or data sources concerned — and never as a badge of origin, quality or endorsement.

Changes to this policy

The date at the top is the last substantive revision. If the scope of what is collected ever changes — a different analytics provider, an additional purpose, anything new that sets a cookie — the consent record is invalidated and you will be asked again rather than presumed to have agreed to the new thing.