Privacy

This page explains what magneticdrum.co.uk collects when you visit, and why. The short version: very little, kept briefly, and never sold or shared.

What's collected

Every request to the site is logged: the path requested, HTTP method, response status, user-agent string, referer, a rough automated bot/human classification, and an anonymized IP address. IPv4 addresses are stored with the last octet zeroed (e.g. 203.0.113.0); IPv6 addresses are stored with the last 64 bits zeroed. The full IP address is never written to disk — it exists only transiently while your request is being handled.

Why

This is a legitimate-interest basis under UK/EU GDPR (Art. 6(1)(f)): keeping a record of who's visiting — in the aggregate, not individually — and watching for abuse of the site. No profiling, no advertising, no third-party analytics or tracking pixels, no cross-site tracking — with one exception, described below: a CAPTCHA widget on the registration and password-reset pages.

Accounts

Creating an account collects your name, email address, a hashed (never plain-text) password, and timestamps recording when your email was verified and when you accepted this policy. Unlike the anonymous request logging above, this is processed under GDPR Art. 6(1)(b) — it's necessary to provide the account you're signing up for, not a legitimate-interest judgement call. If you never verify your email, the account and its data are automatically deleted after 7 days.

If you're signed in with a verified account, programs you write in the LGP-30 IDE are stored against your account so they're available on any device, and are deleted along with it. If you're not signed in, programs stay in your own browser's local storage and are never sent to the server. Course lessons you mark as complete are also stored against your account.

Registration and password-reset pages use Cloudflare Turnstile, a privacy-oriented CAPTCHA, to keep automated bot signups out. Completing it sends some browser signals to Cloudflare; no tracking cookie is set as part of it.

Email delivery

Account verification and password-reset emails are sent via Amazon SES, which processes the email address and message content solely to deliver that email.

Cookies

The only cookies set are session cookies used to keep you (or the admin area) logged in. They're strictly necessary for the site to function and aren't used for tracking, so no cookie consent banner is shown.

Retention

Request logs are kept for 90 days and then deleted automatically. Unverified accounts are deleted after 7 days. Verified account data is kept for as long as your account exists.

Erasure

You can delete your account, and everything stored against it, from your account page. You can also email privacy@magneticdrum.co.uk to request it and it'll be handled manually.

Contact

Questions about this or requests relating to your data can be sent to privacy@magneticdrum.co.uk.