Privacy policy

Last updated: 30 October 2026

1. Controller

Anja Polster, MyLemonCat, Av. Medina N.º 9, Medelim, Portugal. Mailing address: Apartado 0015, 6060-051 Medelim, Portugal. Email: hello@mylemoncat.com.

2. Data when visiting this website

When this website is accessed, connection data is processed to deliver and secure it. The upstream Traefik reverse proxy maintains access logs; the configured log format includes a client IP address field, timestamp, requested resource, HTTP status and technical information. URL query parameters are excluded under the current configuration. Logs are rotated daily, with three compressed rotated files retained in addition to the active log. This does not guarantee deletion after precisely 72 hours. The legal basis for secure technical operation is Article 6(1)(f) GDPR.

3. Hosting and backups

This website is hosted on a netcup server. A separate maintenance container on the same server is planned to deliver the holding page. Email is handled through netcup shared hosting. Technical backups of application data and the PostgreSQL database cluster are stored externally with Hetzner using an encrypted Restic repository via rclone. Backups are scheduled daily. Restic retention keeps seven daily, four weekly and six monthly recovery points. These rules apply to backup snapshots and do not guarantee a fixed deletion date for individual personal data.

4. Email enquiries

If you contact us by email, we process the information you provide, in particular your email address and message, to respond to your enquiry. Depending on the circumstances, we rely on Article 6(1)(b) GDPR (pre-contractual communication) or Article 6(1)(f) GDPR (handling other enquiries). We delete the information when it is no longer needed for the relevant purpose, unless statutory retention obligations or other legitimate reasons require further storage. No fixed technical deletion period for the email mailbox has yet been confirmed.

5. Cookies, analytics and third-party content

We optionally use self-hosted Umami web analytics (analytics.frequenzarchitektur.com) to measure page views, visited pages, referrers and technical usage information. The analytics script loads only after your explicit consent (Article 6(1)(a) GDPR and, where applicable, terminal-equipment consent rules). Without consent, Umami analytics does not start. Your choice is stored using browser local storage and a strictly necessary first-party cookie (up to 180 days, covering all language and legal pages), and can be changed at any time using “Privacy settings” in the footer. Refusal is as easy as acceptance. When withdrawing consent, the page may reload to stop further analytics requests. Umami normally does not set tracking cookies. It processes the IP address and browser information to calculate pseudonymous session identifiers; IP addresses are not stored as separate fields in analytics records. No automatic deletion routine has been confirmed for this self-hosted installation; the proposed twelve-month period has not been implemented. No personal-data custom events are used. Fonts are hosted locally.

6. Your rights

Under the GDPR, subject to applicable conditions, you may request access, rectification, erasure, restriction, data portability or object to processing. Contact hello@mylemoncat.com. You may lodge a complaint with Portugal’s data protection authority, the CNPD.