Privacy and visitor statistics

Why we use statistics

We review aggregate information to understand which pages and languages are useful, spot technical problems and prioritise content improvements. We do not use these statistics to build advertising profiles or follow visitors across other websites.

The purpose of this limited processing is to operate and improve our public website. We rely on legitimate interests and will reassess the setup if its purpose, data or technology changes; a cookie-free design is not a blanket claim that consent could never be required.

Controller

The controller for the Lossikamber website is Munkade maja OÜ (Estonian registry code 12831172), Lossi tn 9, 71003 Viljandi, Estonia. For data-protection questions, email lossikamber@gmail.com or call +372 551 3726.

What aggregate reports may include

Reports available to the Lossikamber administrator may include:

• counts of page views and estimated visitors;
• the viewed page path and referring website hostname;
• at Vercel, an approximate country, region or city and broad device, browser and operating-system category; the Lossikamber dashboard requests only the country;
• aggregate trends by day or reporting period.

Analytics does not collect form contents, purchase details or precise location. Lossikamber does not maintain a separate raw-visit database, and visitor IP addresses are not shown in our administrator view.

How a visitor estimate is made

Vercel derives a one-way visitor identifier from limited request information using a salt that rotates each day. Once the day changes, the identifier cannot be used to connect the same browser to the next day's statistics. The processor may use an IP address when calculating the identifier, but it is not included in the analytics dataset shown to Lossikamber's administrator.

Processor, retention and transfers

Vercel Inc. provides the analytics service and may use authorised subprocessors to deliver it. Vercel does not associate analytics data points with an individual or IP address identifiable to Lossikamber.

Vercel discards its day-based visitor identifier after 24 hours. The current Vercel Hobby plan makes analytics reports available for up to one month; our dashboard requests only 7- or 30-day aggregates and does not copy raw traffic into Supabase. On termination, Vercel deletes Customer Data within a commercially reasonable period unless law requires retention.

Vercel's primary processing facilities are in the United States, and data may also be processed where Vercel or its subprocessors operate. For transfers outside the EEA, Vercel's data-processing addendum incorporates the European Commission's 2021 Standard Contractual Clauses; subprocessors must use an adequate country or equivalent clauses.

Map and external links

When the map approaches the visible area, map tiles are loaded from OpenStreetMap, so that provider receives the usual technical request information. Facebook, Instagram, Booking.com and Google Maps open only when you choose their links, and those services apply their own privacy terms.

Questions and rights

You may request access, correction, erasure or restriction of your personal data and, where applicable, portability. You may object to processing based on legitimate interests and complain to the Estonian Data Protection Inspectorate. Because the reports are aggregated and not linked to a person identifiable to Lossikamber, we may be unable to associate a particular visit with you, but we will respond to every request.

You are not contractually or legally required to provide analytics data; limited technical data is generated automatically when the public site is visited. We do not use it for automated decision-making or profiling that produces legal or similarly significant effects.