Privacy Policy
Last updated: 30 June 2026 Operator: CompileLog (compilelog.com)
Contact: [email protected]
UK ICO registration: Not currently required (sole trader, exempt threshold)
This policy explains what data compilelog.com collects, why, how long it is kept, and what your rights are under UK GDPR. Plain English throughout — no legalese padding.
1. What Data Is Collected and Why
Server logs
The VPS running this site automatically records standard access logs: IP address, request path, HTTP method, response code, referrer, and user agent. This is normal server infrastructure behaviour — it cannot be disabled without breaking the server.
Retention: 30 days, then automatically overwritten.
Legal basis: Legitimate interests (infrastructure security and abuse prevention).
Who sees it: Only the site operator. Not shared with third parties.
Email contact
If you send an email to [email protected], the content and your email address are stored in the operator's email provider inbox. This data is used solely to respond to your message.
Retention: As long as the email thread is reasonably needed (typically 12 months),
then deleted.
Legal basis: Legitimate interests (responding to contact from you).
Who sees it: Only the site operator. Not shared.
Downloadable files
Downloads served directly from this site (lab environments, guides) are served as static files. No account, registration, or personal data is required to download them. Server logs record that a file was downloaded (see above) but not who downloaded it beyond an IP address.
Ko-fi and GitHub Sponsors
If you choose to support via Ko-fi or GitHub Sponsors, those platforms handle the transaction entirely. CompileLog receives a notification that a support contribution was made but does not receive full payment details. Both platforms operate under their own privacy policies — review them before transacting:
2. What Is NOT Collected
| Data type | Status |
|---|---|
| Analytics (Google Analytics, Plausible, etc.) | Not active. None installed. |
| Cookies | None set by this site. |
| Tracking pixels or fingerprinting | None. |
| Accounts or user registration | No account system exists. |
| Contact forms | No contact form currently. Email only. |
If analytics are added in the future, this policy will be updated before they go live and the homepage will note the change.
3. Legal Bases (UK GDPR Article 6)
| Processing activity | Legal basis |
|---|---|
| Server access logs | Article 6(1)(f) — Legitimate interests (infrastructure security) |
| Email correspondence | Article 6(1)(f) — Legitimate interests (responding to your contact) |
| Ko-fi / GitHub Sponsors | Processed by third parties under their own legal bases |
4. Data Retention
| Data | Retention period |
|---|---|
| Server access logs | 30 days |
| Email correspondence | Up to 12 months after last exchange |
5. Data Sharing
Personal data is not sold, rented, or shared with third parties for marketing. The only parties that may process data related to your use of this site are:
- VPS hosting provider — stores server logs on their infrastructure (UK/EU datacenter)
- Email provider — stores email correspondence
- Ko-fi / GitHub Sponsors — process transactions independently if you choose to support
6. International Data Transfers
Server infrastructure is located in the UK or EU. Email providers may process data in the US — if so, transfers are covered by standard contractual clauses or the UK extension to the EU-US Data Privacy Framework. Ko-fi and GitHub operate internationally under their own transfer mechanisms.
7. Children's Data
This site publishes offensive security content intended for adults with appropriate technical context. CompileLog does not knowingly collect personal data from children under 16. If you believe a child under 16 has submitted data, contact [email protected] and it will be deleted promptly.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of data held about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion ("right to be forgotten") where applicable
- Right to restrict processing — request that processing be limited
- Right to data portability — request data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Rights related to automated decision-making — no automated decisions are made about you on this site
To exercise any of these rights, email [email protected]. Requests will be responded to within one calendar month.
9. Right to Complain
If you believe your data is being handled unlawfully, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
The ICO prefers that you contact the operator first to attempt resolution — but you are not required to do so before filing a complaint.
10. Changes to This Policy
This policy may be updated to reflect changes in how the site operates (e.g. if analytics are added, or a contact form is introduced). The "Last updated" date at the top will reflect the current version. Material changes will be noted on the site homepage.
11. Contact
For any privacy question or to exercise your rights:
Email: [email protected]
Response within one calendar month.