Your information, plainly explained.
This site sets no cookies, runs no analytics, and loads nothing from third parties. This notice covers the little that remains: server logs, and what happens when you use the contact form or email me.
UPDATED 2 OCTOBER 2026
The details
Who is responsible
The data controller is Mike Preston, trading as WWFF. Contact: hello@wwff.tech.
What this website records
The web server keeps standard request logs: your IP address, the date and time, the page requested, the referring page, the response status, and your browser's user-agent. I use them to keep the site reliable and to investigate abuse, and keep them for up to 30 days. If a log extract is relevant to a security incident, I may keep that extract until the investigation is complete.
When you use the contact form
I receive the name, email address and message you enter, and use them to reply and to take any steps you ask for before a contract. The form is handled by my own server, which stores each submission and forwards it to my inbox through Mailgun, an email delivery service based in the United States. To filter spam, the server also stores a hash of your IP address and browser user-agent, and the form reports how many keys were pressed, how many times a field was focused, and whether a pointer moved; it does not record what you typed outside the fields you submit. Submissions are kept for the same periods as email enquiries, below.
When you email me
I receive whatever you choose to send, and use it to reply and to take any steps you ask for before a contract. Email is hosted by Google Workspace. Enquiries that don't become contracts are deleted 12 months after the last communication; contract and associated business records are kept for 6 years after the contract ends. Please don't include sensitive personal information unless it is necessary.
Client engagements
Work I do for clients, including any access to their code or data, is covered by the contract for that engagement and, where personal data is involved, a data processing agreement signed before the work starts.
Lawful bases
Contract, where processing is needed to respond to a request about my services or to perform a contract. Legitimate interests, to keep the site secure and reliable. Legal obligation, where records must be kept by law.
Who receives it
I don't sell personal data or use it for advertising. Infrastructure providers process it only to host, secure, or transmit these services.
Your rights
Depending on the circumstances, you may ask for access, correction, erasure, restriction, or portability of your personal data, or object to my use of it. Email me at the address above. If you're unhappy with the answer, you can complain to the Information Commissioner's Office.