Privacy Policy

Effective date: 3 July 2026

1. Data controller

2. What data we process

a) Server log data. When you visit this website, our hosting server automatically records standard technical access logs. These include your IP address, the browser and operating system identifier (user-agent), the page or file requested, the referring page and the date and time of the request. This happens for every website on the internet and is necessary to deliver pages and to keep the server secure.

b) Local storage in your browser. The website stores two small functional values in your browser's local storage: your chosen interface language and your confirmation that you are 18 or older. This information stays on your device, is never transmitted to us, and only exists to remember your preferences on your next visit. You can delete it at any time by clearing your browser storage.

We do not collect names, email addresses, payment data or any account information, because the website has no accounts, forms or checkout.

3. Legal basis

The processing of server log data is based on our legitimate interest in operating and securing the website (Article 6(1)(f) GDPR). The functional local-storage values are strictly necessary to provide the service you requested and are not used for tracking, so no consent banner is required.

4. Retention

Server access logs are rotated daily and automatically deleted after 14 days. We do not build long-term profiles from them. Local-storage values remain in your browser until you clear them.

5. Cookies and tracking

This website uses no tracking or analytics cookies, no advertising pixels and no third-party analytics. The local-storage values described above are not cookies and are used solely for basic functionality.

6. Hosting and international transfers

The website is hosted by DigitalOcean, LLC on a server located in New York, United States. Because the operator is a company registered in the United States and the server is located there, the limited data described above (including IP addresses in server logs) is processed in the United States. For visitors located in the European Economic Area, this constitutes an international data transfer. We keep this processing to the minimum necessary for operating and securing the website, with the short retention period stated above.

7. Your rights

Under the GDPR you have the right to request access to, rectification or erasure of your personal data, to restrict or object to its processing, and to data portability, to the extent these rights apply to the limited data we hold. You also have the right to lodge a complaint with a supervisory authority — for example the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky) or the authority in your country of residence.

To exercise any right, email chatforhead.com@gmail.com. Please note that because we only keep short-lived server logs and hold no account data, we may be unable to identify you from those logs alone, in which case some rights may not apply.

8. Children

This website is intended for adults aged 18 and over and is not directed at children. We do not knowingly process the personal data of minors.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its effective date, is always published on this page.