Website Privacy Policy
How this website handles your data
Last updated: January 2026
Overview
This privacy policy applies to the WSL UI website (wsl-ui.dev). For the privacy policy of the WSL UI application itself, please see the App Privacy Policy.
Data Controller
The data controller for this website is Octasoft Ltd. For any privacy-related enquiries, you can contact us at wsl-ui@octasoft.co.uk.
Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR:
- Consent (Article 6(1)(a)): For analytics cookies and newsletter subscriptions. You explicitly opt-in before any data is collected.
- Legitimate Interest (Article 6(1)(f)): For essential hosting logs required to operate and secure the website.
Cookies & Analytics
This website uses Google Analytics to understand how visitors use the site. This helps us improve the website and user experience.
Google Analytics collects:
- Pages visited and time spent
- Referral source (how you found us)
- General location (country/region level)
- Device type and browser
Your choice: Analytics only loads after you accept cookies via the consent banner. If you decline, no tracking cookies are set and no data is collected.
Local Storage
We store your cookie consent preference in your browser's local storage. This is not a cookie and is only used to remember your choice.
Newsletter
If you subscribe to our newsletter, we collect and store:
- Your email address
- Subscription date and time
- Confirmation status (pending or confirmed)
- A unique subscriber token for managing your subscription
Double Opt-In
We use a double opt-in process to ensure you genuinely want to subscribe. When you sign up, you will receive a confirmation email. Your subscription only becomes active after you click the confirmation link. This protects against unwanted sign-ups and ensures we have valid consent.
How We Store Your Data
Newsletter subscriber data is stored securely on Vercel KV (a Redis-based database). This is our own newsletter system - we do not use any third-party newsletter platforms to manage subscriptions.
Email Delivery
We use Mailtrap (operated by Railsware Products Studio LLC) solely to deliver emails. Mailtrap processes your email address only for the purpose of email delivery and does not use it for any other purpose. See Mailtrap's Privacy Policy for details.
What We Send
We only send emails about new blog posts. We do not send marketing emails, promotional content, or share your email with any third parties for marketing.
Unsubscribing
Every email contains an unsubscribe link. Clicking it immediately removes your email from our database. You can also email us at wsl-ui@octasoft.co.uk to request removal.
Data Retention
- Newsletter data: Retained until you unsubscribe, at which point it is immediately deleted.
- Unconfirmed subscriptions: Automatically deleted after 7 days if not confirmed.
- Analytics data: Retained by Google Analytics for 14 months (their default retention period).
- Server logs: Retained by Vercel for up to 30 days.
International Data Transfers
Some of our service providers process data outside the European Economic Area (EEA):
- Vercel: US-based, using Standard Contractual Clauses (SCCs) for GDPR compliance.
- Google Analytics: US-based, using SCCs and additional safeguards.
- Mailtrap: Operated by Railsware (Ukraine/US), using appropriate safeguards for data transfers.
Third-Party Services
| Service | Purpose | Data Collected |
|---|---|---|
| Google Analytics | Usage analytics | Anonymized usage data (with consent) |
| Vercel | Hosting & database | Server logs, newsletter data |
| GitHub API | Release information | None from visitors |
| jsDelivr CDN | Static assets | Standard CDN logs |
| Mailtrap | Email delivery only | Email addresses (delivery purposes) |
Data We Don't Collect
- No account or login required
- No personal information collected (except newsletter subscribers)
- No tracking before cookie consent
- No data sold to third parties
- No profiling or automated decision-making
Your Rights Under GDPR
If you are in the European Economic Area, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data (for newsletter, use the unsubscribe link or contact us).
- Right to Data Portability: Request your data in a machine-readable format.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time (for cookies via browser settings; for newsletter via unsubscribe).
- Right to Lodge a Complaint: You can file a complaint with your local data protection authority (e.g., the ICO in the UK).
To exercise any of these rights, contact us at wsl-ui@octasoft.co.uk. We will respond within 30 days.
Cookie Management
You can clear your cookie consent preference at any time by clearing your browser's local storage for this site. To opt out of Google Analytics entirely, you can use the Google Analytics Opt-out Browser Add-on.
Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be noted by updating the "Last updated" date at the top of this page. For newsletter subscribers, we will notify you of material changes via email.
Contact
For privacy-related questions or to exercise your data rights, contact us at wsl-ui@octasoft.co.uk.