Privacy Notice

Who is responsible

This site is run by an individual, reachable at mexzplays@gmail.com. That address is the contact point for every request described below.

What is collected

Only what you type into the form: a full name and a message, each with a length limit. No email address, account, or other identifying detail is requested or stored against your entry.

Submitting the form also sends your IP address to the server, as any web request does. It is never stored in readable form. It is one-way hashed with a private salt purely to rate-limit abuse, and hashes older than about an hour are deleted automatically. A hash cannot be reversed back into an IP address.

A browser cookie records that this browser has signed, so the site can show you your own entry instead of the form on your next visit. It contains only your entry’s slug, not your name or message directly, and nothing is tracked with it beyond that.

Why, and on what legal basis

Your name and message are published because you asked for them to be, by ticking the consent checkbox before submitting. That consent (GDPR Article 6(1)(a)) is the legal basis for publishing and keeping your entry. Rate-limiting submissions by hashed IP relies instead on legitimate interest (Article 6(1)(f)): keeping the register usable and free of spam.

Who else sees it

Every entry is public by design: it is visible on this site, in /register.json, and through /api/register, and it can be read by search engines and other automated systems. That visibility is the entire point of the register, and it is what you are consenting to.

The underlying data is hosted with infrastructure providers (a database host and a hosting platform) acting as processors on the site’s behalf. Depending on where that infrastructure is located, data may be processed outside the European Economic Area, in which case that transfer relies on the provider’s standard contractual clauses or equivalent safeguard.

How long it is kept

The register is meant to be a lasting record, so entries are kept indefinitely by default. That said, permanence is not a legal exemption: you can withdraw your consent at any time, and an entry is removed or hidden once you do, as described below.

Your rights

Under the GDPR, you can ask to:

• see what is stored about your entry,
• correct it,
• withdraw consent and have it erased or hidden from the public register,
• restrict or object to its processing, and
• receive a copy of it in a portable format.

To exercise any of these, email mexzplays@gmail.com with a link to your entry, or your name and roughly when you signed. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

If your name is on here and you didn’t put it there

The form doesn’t verify that a submitted name belongs to the person typing. If someone else entered your name, you have the same rights as anyone else described above, regardless of who submitted the entry: email mexzplays@gmail.com with a link to the entry and it will be removed or hidden while it’s looked into. See also the terms for how impersonation and abuse reports are handled.

Children

This site is not directed at children and is not knowingly used to collect data from anyone under 16. If you believe a child has signed the register, email mexzplays@gmail.com and the entry will be removed.

Changes

If this notice changes in a way that matters, the date at the top will change with it.