Flightmussy StudioPrivacy
In short: no ads, no advertising networks, no cookies, nothing sold. Visits are counted anonymously on our own server in the European Union.
Who is responsible
Flightmussy Studio, Oslo, Norway, is the controller of the data described below. Contact: Corporate@studioflightmussy.com. The full legal name and postal address are available on request at that address, and to any supervisory authority on demand.
1. Server logs, for everyone
Every request a browser makes is written to the web server's log: the IP address, the date and time, the address requested, the referring page, the browser's user agent string, and the response's status and size.
- Why: to run the server, find faults, and defend against scrapers, floods and attempts to break in.
- Legal basis: legitimate interests, Art. 6(1)(f) GDPR, a website that stays up and is not trivially abused.
- Kept: 14 days, then deleted automatically. Nothing is archived beyond that.
2. Anonymous visit counting, for everyone
A small script served from this domain counts what is read. It records the page's address and title, the site you arrived from, any campaign tags on the link you followed (the standard utm_source, utm_medium and utm_campaign parameters; nothing else from the address is read), whether your browser said you typed this address or followed a link from another site, an approximate location worked out from your IP address (country, region, city) and the name of your network operator, your browser, operating system and device type, your screen and window size and pixel density, your browser's main language and time zone, how long the page stayed in the foreground, and how far down it was scrolled.
It also records a few things whose only job is to tell a person from a program: how many times you interacted with the page and how soon the first of those came, whether your device has a touchscreen and what kind of pointer it reports, how many measurements were sent, and a handful of technical markers that headless browsers give themselves away with. None of it is content: not which key, not which element, not where on the page, only that an interaction happened and how many times. The script never reads what you type.
What makes it anonymous is what it does not do:
- It stores nothing on your device. No cookie, no browser storage, nothing to clear.
- Your IP address is not stored. It is used on our server to look up an approximate location, from a local database so the address is not sent anywhere, and then discarded.
- To join the pages of one visit together, the server derives a key from your IP address, your browser and this site, mixed with a random value that is regenerated every day and never written to disk. So the key cannot be recreated tomorrow, and from the stored data there is no way to tell that two visits were the same person.
- Legal basis: legitimate interests, Art. 6(1)(f), knowing what is read at a resolution that cannot identify anyone. Because this counting writes nothing to and reads nothing from your device, it needs no consent under Art. 5(3) of the ePrivacy Directive.
- Kept: 400 days.
3. When you write to us
If you write to Corporate@studioflightmussy.com, your message, your address and anything you include are kept in that mailbox (Microsoft 365) so we can answer you and follow up on what you asked about. Legal basis: steps taken at your request before a possible agreement, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f). Kept for as long as the conversation is useful, and deleted when you ask.
4. What this site keeps on your device
Nothing. This site sets no cookie and uses no browser storage.
5. Other organisations involved
The site is delivered through Cloudflare, which stands in front of our server: it receives each request, including your IP address, to deliver the page and to keep automated abuse away, and keeps its own short logs. Cloudflare is based in the United States.
Everything else is served from this domain: the fonts, the pictures and the counting script. There are no advertising networks, no social media widgets and no Google Fonts. The links to our maps and to the press open those sites, which have their own privacy notices.
6. Where it is
The server is a virtual machine rented from Contabo GmbH (Munich, Germany) and located in the European Union. Contabo processes the data on our instructions and can reach the machine as any hosting provider can.
7. Your rights
You can ask us to confirm what we hold about you and give you a copy (Art. 15), correct it (16), erase it (17), restrict how it is used (18), hand it over in a portable form (20), and object to anything we do on the basis of legitimate interests (21).
One honest limit: for the anonymous counting in point 2 and for the server logs, we cannot tell which records are yours, because there is no identifier to search on. Art. 11 GDPR covers exactly this case.
Write to Corporate@studioflightmussy.com. We answer within 30 days. You can also complain to a supervisory authority: ours is the Norwegian Data Protection Authority, Datatilsynet, Postboks 458 Sentrum, 0105 Oslo. You may instead complain to the authority where you live or work.