corvus / privacy
privacy, without the fog.
we don't want your data.
visits become anonymous totals, without tracking cookies.
the few things we store (like a vote or a login code) are listed below, and they expire.
your analytics choice
counting starts by default. ‘ok’ dismisses the notice and counts one soldier acknowledgement; it is not analytics consent. ‘don't count me’, GPC and DNT switch to anonymous page-hit totals only. your choice stays until you change it or clear site data. a refusal is kept when this notice changes.
analytics is off.
who holds the lantern?
Francisco Gabriel Van Langenhove is responsible for corvus.gent and stats.corvus.gent, including music and games. questions or data requests: gabriel@corvus.gent.
what gets counted
page visits and allowlisted actions are counted by default through PostHog EU, without cookies, device storage, profiles or recordings. PostHog temporarily derives a daily pseudonym from network/browser information; only the totals are anonymous. names, emails and form contents are excluded. GPC, DNT or ‘don't count me’ prevent PostHog from loading: only a page/day counter is incremented, with no ID, hash or stored headers. those unseen hits cannot identify unique people.
why, and on what basis
legitimate interest is the stated basis for basic cookieless audience measurement and abuse prevention. Spotify playback requires your click. login emails, votes and bookings fulfil your request. you can object to PostHog counting here; only an anonymous hit remains. we do not sell data.
what stays, and for how long
login code: 3 minutes. session: 7 days or until logout. login/access-request records and email-linked visitor-count guesses: at most 90 days. anti-abuse limits: up to 24 hours, with a different salted IP hash each day; our app does not store raw IPs. challenges: 5 minutes. game history on the server: 48 hours after use; streaks and vote deduplication: up to one year. anonymous totals and public song suggestions may stay until removed.
analytics event retention is controlled by PostHog’s project setting; our target is 90 days, with confirmation of that account setting still pending. hosting and email delivery logs/backups have their own provider retention. contact me for the current details.
Resend: US storage; 30-day email/log retention on Free/Pro/Scale, 7-day backups; Enterprise may differ. Resend GDPR.
the small things in your browser
necessary cookies: sess keeps you logged in; vid prevents duplicate language votes; mvid remembers music votes and daily-game progress. they are signed, secure and inaccessible to page scripts. sess expires after 7 days; vid and mvid after one year. they are never used to identify you in analytics.
one local privacy-choice flag remembers ‘ok’ or ‘don't count me’. ‘ok’ also adds one soldier acknowledgement per browser/site origin; clearing site data can allow another. this flag is not sent to PostHog. analytics and campaign attribution stay in memory and do not use browser storage.
if you allow analytics, this tab remembers the public labels on a sidequests campaign link until you close it or turn analytics off. they group visits, button clicks and shares from a post.
when another service gets involved
Spotify receives a playback request only after play, and may then set its own cookies. our server looks up song links at Spotify or Apple when you submit one. map tiles come through our server from CARTO, without forwarding your IP. Leaflet, Sortable and the PostHog library are hosted here.
Buy Me a Coffee and Pidgy booking are links, not embedded forms. their privacy rules apply after you follow them. /links, /go and our campaign shortcuts only add campaign labels (UTMs) and count visits/clicks; they never collect form contents or visitor identities. (cookieless counting; privacy signals use anonymous hits only).
Notion holds my manually entered X log. public stats show totals, public campaign/voice labels and my own posts; reply text and target URLs stay behind login. approved campaign labels and region-hour slots accompany optional analytics. Corvus copies expire within 24 hours; source records follow my Notion retention. the workspace region still needs confirmation, so EU-only storage is not promised.
where the data travels
our Vercel functions are configured for Frankfurt (fra1). static files and request routing use a global network. PostHog EU is in Frankfurt. Frankfurt is also the Redis migration target; the current database region and the completed move still need verification.
Resend stays as a temporary exception: Ireland is the intended sending region, pending account verification, but email contents and logs are stored in the US. an Irish sending region does not change that. Resend.
Vercel is a US company. its Vercel DPA and EU–US Data Privacy Framework provide transfer safeguards; they do not mean all provider logs, support access or backups stay in the EU. we still need to confirm our account settings and applicable agreements.
your data, your call
email me to request access, correction, deletion, restriction or portability, or to object to processing based on legitimate interest. you can withdraw playback consent by closing the player/page; Spotify controls cookies it already set. we normally respond within one month. we may need proportionate proof that a request concerns your data, and cannot trace anonymous totals back to you.
you can complain to the Belgian Data Protection Authority: gegevensbeschermingsautoriteit.be.
who helps run this
Vercel hosts the site, PostHog EU handles counts, Resend sends login emails and a managed Redis service stores the expiring records. the deployed Redis provider and its region still need confirmation; ask me for the current details. external services may process data outside the EEA under their contracts and transfer safeguards. their policies also explain logs and backups.
Legion invitations and crow transmissions
A Legion claim stores your email privately, your chosen public handle, rank, admission source and dates for up to one year. Gabe can correct or remove it. Invitation tokens are random, stored only as hashes, expire after 30 days by default, and may be revoked. Applications and invitation audit records are kept for 90 days after review or expiry.
Newsletter signup is separate and optional. We send one confirmation email through Resend; no confirmation means no transmissions. Pending signups expire after 48 hours; confirmed signups expire after one year. Every transmission must include an unsubscribe link. Unsubscribing removes the subscription. No marketing messages are sent until Gabe approves them.
The admin session is an essential, secure, httpOnly cookie lasting eight hours. Public pages cannot read it. Cardneto and partner counters use short-lived daily IP hashes for abuse prevention and deduplication, never raw IP addresses. Your found-card preference stays only in your browser. Stripe handles card details; Corvus keeps a payment reference, amount and membership result, never card numbers.
To request deletion or access, email gabriel@corvus.gent. Payment providers retain their own records under their policies.
the video challenge
Compound v2 stores votes to prevent duplicates and private editing feedback for 90 days. An optional handle is only visible to Gabe. Campaign counters measure page opens, votes and shares; social view counts are entered by Gabe and are not unique people. Detailed campaign events follow your existing analytics choice; GPC, DNT or refusal leave only aggregate counts. Persistent journey tracking remains optional. Contact gabriel@corvus.gent for deletion.
hackathon interview requests
Your name, project and handle are private, visible only to Gabe to arrange the interview you requested. Each request is deleted after 60 days. Contact gabriel@corvus.gent to delete it sooner. Submitting does not publish your details or sign you up for a mailing list.
call & SF requests
Your name, contact, chosen call, headache and preferred times are private. They are stored on this site for 60 days and emailed to Gabe via Resend to arrange the time. Email copies follow the separate mailbox/provider retention above. Coffee confirmation uses the honor system. Public stats contain counts only; no form details. Contact gabriel@corvus.gent for deletion.