Privacy notice

This website sets no cookies, runs no analytics, embeds nothing from other companies, and asks you for nothing. What follows is the short, complete truth about the little that is unavoidable.

Who is responsible

Fortara, Sweden, is the controller for the personal data described here. Privacy enquiries and requests: privacy@fortara.org.

What is collected

Server logs

Our web server records each request it answers. A log line contains your IP address, the date and time, the page requested, the response code, and the browser's self-reported user agent. This happens for every website you visit; it is how a server answers a request at all, and how we notice attacks and breakages.

• Purpose: keeping the site available and secure, and diagnosing faults.
• Legal basis: legitimate interests, Article 6(1)(f) GDPR — running a website securely.
• Retention: logs are kept for a maximum of 14 days and then deleted. We do not build profiles from them and never combine them with anything else.

Email you send us

If you write to us, we hold your message and address for as long as we need to answer it, and up to 12 months afterwards so we can pick up a thread again. Legal basis: legitimate interests, or your consent where you have given it. We do not add anyone to a mailing list — there is no mailing list.

What is not collected

• No cookies of any kind, including so-called essential ones.
• No analytics, heatmaps, session recording or A/B testing.
• No social media buttons, embedded video, comment systems or advertising.
• No fonts, scripts or stylesheets loaded from another company's servers. Our typefaces are hosted by us precisely so that visiting this page does not tell Google that you did.
• No accounts, no forms, no newsletter, no tracking of whether you clicked a link.

Who else can see it

Our hosting provider processes data on our behalf, because the server logs sit on their machine. The server is located in the EU/EEA and the provider acts under a data processing agreement. We share personal data with nobody else, and we do not transfer it outside the EU/EEA.

Your rights

Under the GDPR you may ask us for access to your personal data, for correction of it, for erasure, for restriction of processing, and you may object to processing based on legitimate interests. Write to privacy@fortara.org and we will answer within one month.

In practice a request about server logs is difficult for anyone to act on, including us: we cannot identify which log lines are yours without you telling us your IP address and the time you visited, and after 14 days they are gone regardless.

If you think we have handled your data badly you can complain to the Swedish Authority for Privacy Protection, Integritetsskydds­myndigheten (IMY).

Children

This site is written for adults. We do not knowingly collect data about children and there is nothing here to sign up to.

Changes

If this notice changes in a way that affects you, the change will be described here rather than quietly swapped in. Last reviewed 30 July 2026.