Privacy notice

This privacy notice describes the processing of personal data on runoverse.org.

The site has no user accounts or forms and uses no cookies, analytics or advertising scripts.

Data stored in the browser

The browser stores the following data:

• changed settings, including the interface language and the map layer;
• saved words, notes, filter presets, reading lists and ratings;
• recent searches and compared poem pairs (for the session only);
• open panels and the last viewed position in a list (for the session only).

Session data are deleted when the tab is closed. Data stored in the browser are not sent to the web server.

Clearing the site data for runoverse.org in the browser settings deletes them. No other copy exists, so the deletion is final.

Server logs

Zone Media OÜ hosts the site in Estonia as a data processor. For each request, the server log records the time, the requested page or file address, the response status code and size, browser information (User-Agent), the referring page address and the IP address.

In the daily summaries, IP addresses are replaced by hash values. A separate random value is used for each day's hashes and is deleted after seven days; after that, a hash value can no longer be linked to an IP address.

The daily summaries contain request counts per page, the number of distinct hash values, and the numbers of requests and visitors per country. The country is determined from a lookup table on the server. The summaries are not published or passed on.

The data are processed to obtain an overview of site use and to detect automated requests that strain the site. The legal basis is the controller's legitimate interest (Article 6(1)(f) of the General Data Protection Regulation). No automated decisions are made and visitors are not profiled.

Visitors have the right to object to processing based on legitimate interests on grounds relating to their particular situation (Article 21).

Retention periods

• Server log entries: about six days.
• Random value used for hashing: seven days.
• Daily summaries: 24 months.
• Table of daily totals, containing only numbers: indefinitely.
• Session data: until the tab is closed; other browser data: until the visitor deletes them.

Files loaded from other providers

Some pages load map tiles from other providers' servers. The browser sends these requests directly to the provider, which receives the IP address, the requested file address, browser information (User-Agent) and the referring page address. The legal basis is the controller's legitimate interest in displaying the pages correctly (Article 6(1)(f)).

• Esri Inc. (United States): the default background map;
• OpenStreetMap Foundation (United Kingdom): the alternative background map.

Transfers to the United States are based on the EU-U.S. Data Privacy Framework; Esri states that it is certified under it. Transfers to the United Kingdom are based on the European Commission's adequacy decision.

Visitors' rights

Visitors may request access to, rectification or erasure of their personal data, or restriction of processing.

Requests, objections and questions can be sent to veskis.kaarel@gmail.com. Summary entries can be matched to an IP address only for the seven days the random value exists.

Complaints may be lodged with the Estonian Data Protection Inspectorate or with the supervisory authority of the country where the visitor lives or works.

Last updated: 11 September 2026