Privacy policy

The short version: this site sets no cookies, runs no analytics, and collects one thing only — an email address, and only if you type one into the newsletter form. Everything below is the long version of that sentence.

Who is responsible

The Towncenter maintainers publish this site and decide what happens to the data described here. Reach out through the channels on the contact page.

Cookies and analytics

No cookies. There is no cookie banner because there is still nothing to consent to: no tag manager, no advertising pixel, no fingerprinting, and nothing sold or shared with anybody.

One measurement script does run, and this page said in advance what it would have to be. It is Umami, free software, self-hosted on a server we run rather than handed to a third-party analytics company. It records the page you landed on, where you came from, and a coarse country, browser and screen size. It sets no cookie, stores no identifier that follows you between sites or between visits, and never sees your IP address in storage. There is no visitor profile because there is nothing to build one from. One custom event exists — that someone left an address in the hosted instance form — and it records that it happened, not who did it.

One thing is stored in your browser: your choice of light or dark theme, under the key towncenter-theme in local storage. It never leaves your device and is never read by the server.

If you would rather not be counted at all, any tracker blocker stops it, and so does Do Not Track in your browser settings. Nothing on this site behaves differently if you do.

The free tools

The calculators under Tools run entirely in your browser. What you type into them — your day rate, the number of businesses in a sector, anything else — is never transmitted and never stored. Close the tab and it is gone.

The newsletter form

If you submit the form asking to be told when a hosted instance opens, one piece of data is collected: your email address.

• Purpose. To email you once, when a hosted instance becomes available.
• Lawful basis. Your consent, given by submitting the form.
• Processor. Resend, which stores the address and handles delivery.
• Retention. Until you unsubscribe, or until the plan is abandoned, whichever comes first.
• Sharing. None. The address is not sold, rented, or used for anything else.

Every message carries a one-click unsubscribe link, which deletes the address. You can also ask for deletion directly — see below.

The form also carries a second field, kept off the screen, that you never see and cannot fill in by accident. Automated scripts fill it in regardless, and a submission that arrives with it filled is dropped: nothing is sent to Resend, nothing is stored. It is there so the form needs neither a CAPTCHA nor a third-party bot service watching you type.

Server logs and abuse protection

The newsletter endpoint applies a rate limit, which means it briefly holds your IP address in memory — for sixty seconds, never written to disk, and discarded when the process restarts. The web server may keep standard access logs; those are operational, not analytical, and are not used to build any profile.

When a submission fails — a malformed address, the rate limit, or the mailing provider being unreachable — the server writes one line saying what broke and when. That line never contains the address you typed, and never any part of the provider's credentials. It exists so that a form which has quietly stopped working gets noticed, rather than discovered months later.

Third parties your browser contacts

The map on the home page loads its tiles from OpenFreeMap. Loading them means your browser makes requests to that service, which sees your IP address as any web server would. Fonts are served from this site, not from a font CDN, so nothing is requested from Google.

Your rights

Under the GDPR you may access, correct, erase, restrict or object to the processing of your data, and request it in a portable form. In practice there is one field to act on, so the answer is usually quick. Write through the contact page. You also have the right to lodge a complaint with a supervisory authority; in France that is the CNIL.

The software is separate

This policy covers this website only. Towncenter itself is self-hosted software: when you run it, the data it holds lives on your server, under your control, and nothing is sent here. If you deploy it for other people, you are the controller of that data, not us.

Changes

If this policy changes, the date at the top changes with it. The page is version controlled in the site's public repository, so the history is auditable.