Privacy
This site sets no cookies, does not track visitors, and loads nothing from anybody else. The server keeps a short-lived log, and this page says what goes into it and why.
This is a translation. The Finnish text is the authoritative version: Tietosuojaseloste.
Controller
- Company
- Mikko Koivunalho Oy
- Business ID
- 2265572-9
- Address
- Laaksluomantie 8, 20960 Turku, Finland
- Contact
- mikko.koivunalho@iki.fi
What is collected
The server log, and nothing else. For each request we record:
- a truncated network address -- not your full IP.
203.0.113.47is recorded as203.0.113.0, and an IPv6 address likewise keeps only its network part; - the time, the page requested, the response code and the number of bytes sent;
- the identifier your browser sends (user agent) and the referring address, if there is one.
No cookies. No identifiers. Nothing that follows you from one visit to the next. There are no forms and no analytics, and the site loads no fonts, scripts or images from any other server.
What it is used for
Two purposes:
- Operating the site -- seeing that it works, and finding errors when it does not.
- Defending it against abuse -- for example recognising an automated client hammering the server.
It is not used for marketing, for profiling, or for following individual visitors, and it is not sold or passed to anybody for those purposes.
Lawful basis
Legitimate interest, GDPR Article 6(1)(f). Recital 49 names network and information security explicitly as such an interest. The address is truncated before it is written precisely so that the processing stays as narrow as the purpose requires.
How long
90 days, after which the log is deleted. That is long enough to investigate abuse, and keeping it longer would serve neither purpose above.
Who processes it
The logs sit in a data centre inside the European Union. The hosting provider acts as a processor and does not use the data for its own purposes. Nothing is transferred outside the European Economic Area.
Your rights
You may ask for access to data about you, ask for it to be corrected or erased, and object to the processing.
A practical note, which is more honest than silence: from a truncated network address we generally cannot tell which log line is yours. That is deliberate -- so little is collected that it does not identify you -- but it also means we may be unable to act on a request that would require finding you in the log (GDPR Article 11).
You may lodge a complaint with a supervisory authority. In Finland that is the Office of the Data Protection Ombudsman.
Other services
This notice covers this website only. The Polmai service has its own privacy notice, and it concerns quite different data.
Updated 23 August 2026.