This site is small and so is this notice. It describes what actually happens when you use lacapraengineering.com, written against the code that runs it rather than copied from a template.
Who is responsible
Christopher Lacapra, trading as Lacapra Engineering, is the data controller. Contact: [email protected].
What this site collects
The contact form
When you send a message, the form takes your name, email address, an optional subject line, and the message itself. That content is emailed to me and also stored on this site, so that a mail delivery failure cannot lose your enquiry — silent mail failures are common on shared hosting, and a lost message costs you more than it costs me. The stored copy is visible only to me, behind the site login, and is never shared or sold. The site also records which page you came from, and keeps a short-lived counter, described below, to stop the form being abused.
Your email address is placed in the reply-to header so I can answer you. The message is sent from an address on this domain, which is why the sender you see is not your own address.
Stopping form and leaderboard abuse
To stop automated flooding, the site counts recent submissions from a visitor. It does this against a salted SHA-256 hash of your IP address, never the address itself, and the counter expires on its own after ten minutes.
The arcade
If you post a score to the leaderboard you choose a display name, and that name plus your score is stored in the site database and shown publicly. Pick a nickname if you would rather not be identifiable — nothing checks or needs your real name.
Each score row also carries a salted SHA-256 hash of the IP that submitted it, used only for rate limiting. Those hashes are blanked automatically after thirty days, leaving just the name and score.
Your own best scores are additionally kept in your browser under the key leArcadeScores. That never leaves your device, and clearing your browser storage erases it.
Analytics
Google Analytics loads only if you accept it in the cookie banner. Reject, or simply ignore the banner, and no analytics script is requested at all. The details are in the cookie policy.
Server logs
The hosting provider records ordinary web server logs — IP address, timestamp, requested URL, browser user agent — as part of running and securing the server. This is standard for any website and happens beneath the application.
Why I am allowed to hold it
| What | Why it is lawful |
|---|---|
| Contact form messages, and the copy stored on this site | Your consent, given by ticking the box on the form, and my legitimate interest in not losing an enquiry to a mail failure. Withdraw it by emailing me and I will delete both copies. |
| Leaderboard name and score | Your consent, given by choosing to submit a score. Playing without submitting stores nothing. |
| Rate-limit hashes | Legitimate interest in keeping the site usable and not relaying spam. |
| Analytics | Your consent, given in the cookie banner and withdrawable at any time. |
| Server logs | Legitimate interest in operating and securing the service. |
How long it is kept
- Enquiries from the contact form — held in my mailbox and on this site for as long as the correspondence is useful, then deleted. Ask at any time and I will delete both copies.
- Rate-limit counters — ten minutes for the form, five for the arcade.
- Leaderboard entries — until removed; only the top scores per game are retained.
- IP hashes on scores — blanked after thirty days.
- Analytics — held by Google under their retention settings.
- Server logs — under the hosting provider’s own retention policy.
Who else sees it
I do not sell anything to anyone, and there is no advertising network on this site. Data is touched by these parties only:
- The hosting provider, which runs the server and the mailbox.
- Google, for analytics, and only if you accepted it.
Your rights
If you are in the UK or EU you can ask for a copy of what I hold about you, ask me to correct it, ask me to delete it, object to it being held, or complain to your data protection authority. In practice, for this site, that usually means “delete my email” or “remove my leaderboard entry” — both of which I will simply do.
Write to [email protected]. No particular form of words is needed.
Changes
If what the site collects changes, this page changes with it, and the date at the top moves.