Privacy Policy

Who is responsible

Boot Towers is the data controller for personal data processed through this site. Contact: [email protected].

What we collect

There is no account to create, and we do not sell or share personal data. The site is a public reference. In normal use we process:

• Server logs. Our host records the IP address, timestamp, requested URL, referrer and browser user-agent of each request. These keep the service running and secure, and are retained for no more than 30 days.
• Local storage on your device. Your cookie choice is stored in your browser. It never reaches our servers and we cannot read it. The guide you build is held in the address bar, not stored.
• Analytics, only with consent. No analytics is running on this site today. If we add any, it will be privacy-respecting, it will load only after you click “Accept All”, and declining will leave the site fully functional.
• Email you send us. If you write to [email protected], we hold your message and address for as long as needed to answer you and to keep a record of the exchange.

We do not knowingly collect data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Legal bases (GDPR Article 6)

• Legitimate interests — server logs, for security and reliability. You may object at any time.
• Consent — optional analytics cookies. Withdrawable at any moment through “Cookie Preferences” in the footer, as easily as it was given.
• Legitimate interests and contract — replying to an email you chose to send.

Cookies and similar technologies

Strictly necessary storage — the record of your consent choice — is exempt from consent requirements, because without it we could not remember what you asked for. Everything else stays blocked until you opt in. Your choice is kept for 12 months, after which we will ask again.

Manage or revoke your choice at any time via Cookie Preferences in the footer. You can also clear site data in your browser settings.

Sharing and international transfers

We do not sell personal data, and we do not “share” it for cross-context behavioural advertising as those terms are defined under the CPRA. Only our hosting provider supports the service today; should an analytics provider be added, it would process data only after your consent. Where data reaches a country without an adequacy decision, transfers rely on the European Commission's Standard Contractual Clauses.

The guides link to third-party project pages and vendors. Once you follow an outbound link you are on their property and their privacy policy applies, not ours.

Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to processing of your data; to receive it in portable form; to withdraw consent; to opt out of sale or sharing (we do neither); and not to be discriminated against for exercising any of these.

Write to [email protected] and we will respond within 30 days. EU and UK residents may also complain to their national supervisory authority; we would appreciate the chance to resolve matters first.

Security and retention

The site is served over HTTPS and access to the underlying server is restricted. We keep personal data only as long as the purpose requires — logs for up to 30 days, correspondence for up to 24 months. No system is perfectly secure, and we cannot guarantee absolute security.

Changes

We will update this page when our practices change and revise the date above. Material changes affecting your rights will be signalled on the site.