Privacy Policy
Last updated: 3 June 2026
Short version: recitations.org does not collect personal data. There are no accounts, no sign-up, no contact forms. Your microphone audio is processed only inside your browser and never leaves your device. The only thing we measure is anonymous, cookieless usage statistics — and you can turn that off.
1. Who is responsible
This website is operated by an individual (a private person), not a company:
- Operator (data controller): Pavel Sidorov, a private individual based in Montenegro.
- Contact / data protection requests: [email protected]
- Website:
recitations.org
Full operator details are on the Imprint page.
2. What we collect
We deliberately keep data collection to the absolute minimum.
| Category | Do we collect it? |
|---|---|
| Account data (name, email, password) | No — there are no accounts. |
| Microphone audio / voice recordings | No — audio is processed locally in your browser and is never uploaded or stored. See the Voice & Audio note. |
| Pitch / svara analysis results | No — computed in your browser, not sent to us. |
| Contact forms / messages | No — there are none on the site. |
| Payment data | No — the site is free and currently has no paid features. |
| Advertising / cross-site tracking cookies | No — none. |
| Anonymous usage analytics | Yes — see section 3. |
3. Analytics (the only data we process)
We use Umami, a privacy-friendly analytics tool that we host ourselves on our own
server (analytics.recitations.org). It helps us understand which mantras and pages are used,
so we can improve the site.
- No cookies are set and no cross-site tracking is performed.
- We do not collect names, emails, or any information that identifies you personally.
- Aggregate, non-identifying data points are recorded: page URL, referring page, approximate country (derived at the network edge from your IP, which we do not store), and coarse browser/device type and screen size.
- We honour the “Do Not Track” (DNT) browser signal: if it is enabled, no analytics events are sent at all.
- Retention: the aggregated, non-identifying analytics data is retained for up to 24 months, after which it is deleted or kept only as anonymous long-term totals.
- You can opt out at any time via the notice banner on your first visit, or by enabling “Do Not Track” in your browser. See the Cookie & Analytics Notice.
Legal basis (GDPR Art. 6(1)(f)): our legitimate interest in understanding aggregate, anonymous usage to maintain and improve a free educational service. Because the analytics are cookieless and do not identify you, this is a minimal, proportionate processing.
4. Server logs
Like any website, our server may briefly process technical request information (such as IP address) to deliver pages and protect against abuse. We do not build user profiles from this, and we do not retain a visitor IP log for the public site. Administrative actions by the site’s own editor are logged for security.
5. Who we share data with
We do not sell or share your personal data with anyone. We use only these processors:
- Hetzner Online GmbH — hosting provider that runs the server, located in the EU (Helsinki, Finland).
- Cloudflare, Inc. (USA) — content delivery network and security proxy that sits in front of the website. To deliver pages and protect against attacks, Cloudflare necessarily processes connection data such as your IP address and request metadata. This involves a transfer to the United States, carried out under the EU Standard Contractual Clauses and Cloudflare’s certification to the EU–US Data Privacy Framework. Cloudflare may also insert a small same-origin script that obfuscates the email addresses shown on our pages to protect them from spam harvesters; it sets no cookies and sends no data to third parties.
- Our own self-hosted analytics (Umami) — no third-party analytics company is involved.
Beyond the Cloudflare proxy above, the site itself loads no third-party fonts, scripts, or CDNs: fonts and scripts are self-hosted, so rendering a page does not disclose your IP to Google, jsDelivr, or other external services.
6. International users — your rights
Because we collect essentially no personal data, most data-subject requests will simply confirm that we hold nothing about you. Where applicable you still have the following rights, which you can exercise by emailing [email protected]:
- EU / UK (GDPR / UK GDPR): access, rectification, erasure, restriction, objection, and data portability; and the right to lodge a complaint with your supervisory authority (in Finland, the Office of the Data Protection Ombudsman, Tietosuojavaltuutettu).
- California (CCPA/CPRA): the right to know, delete, and correct. We do not sell or share personal information and do not use it for cross-context behavioural advertising.
- India (DPDP Act 2023): the right to access, correction, and erasure, and to a grievance redressal contact — which is [email protected].
7. Children
This is a general-audience educational site and is not directed at young children. We do not knowingly collect personal data from children, and because the site has no accounts and no forms, it provides no means to submit such data.
8. Future changes (e.g. donations or paid features)
The site is currently free and collects no payment data. We may, in the future, introduce optional donations or paid features. If we do, we will update this Policy before any such feature goes live and describe exactly what additional data (if any) is processed and by which payment provider.
9. Updates to this Policy
We will revise this page when our practices change and update the “Last updated” date above. The English version is authoritative.