This page describes every piece of personal data system5.dev collects through this website, why, on what legal basis, and how to make us stop. It is written to be read rather than survived, and it describes what the site actually does today.
system5.dev — Lisbon, Portugal — is the controller for the data described here.
Contact: rv@system5.dev, or ip@system5.dev for anything formal.
Your name, your email address, where your product lives, what you are most worried about
breaking, and whether you told us a customer already pays for it. We also record the page you sent
it from, the site that referred you, and any campaign parameters in the URL (utm_*,
gclid, msclkid) so we know which advert or link a request came from.
It goes to a function we run in our own AWS account (Europe, Paris — eu-west-3)
which does one thing: it emails the message to us through Amazon SES. There is no database and no
third-party form service. It reaches the same inbox it would have reached if you had written to us
directly.
Legal basis: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)). Kept: in our mailbox, as correspondence. If you ask us to delete it, we delete the thread and confirm that we have.
If you accept on the banner, we load Google Analytics 4 and Microsoft Clarity. Until you accept, neither is fetched at all: no tag, no cookie, no request to either company. Google Consent Mode is set to denied for analytics and advertising storage before anything else on the page runs.
Clarity records how a visit moves through the page — clicks, scrolling, mouse movement — and
replays it. The teardown form is excluded from that recording: it carries
Clarity's data-clarity-mask attribute, which keeps that part of the page and
everything inside it out of every recording and overrides any project-level setting.
Legal basis: your consent (GDPR Art. 6(1)(a); ePrivacy). You can take it back at any time with the Cookies link at the bottom of the front page, or by clearing this site's storage in your browser. Withdrawing changes nothing else — the form works identically either way.
Google and Microsoft also process this data for their own purposes, and both may transfer it outside the EEA under the European Commission's standard contractual clauses. Their notices: Google and Microsoft.
The site is served from Amazon S3 through Amazon CloudFront. Those services log requests, including IP addresses, in the ordinary way needed to serve and secure a website. We do not build profiles from them.
Legal basis: our legitimate interest in operating a working, secure site (GDPR Art. 6(1)(f)).
| What | Set by | Why | When |
|---|---|---|---|
s5-consent(local storage) |
system5.dev | Remembers whether you accepted or declined measurement, so we stop asking. | Always — it is the record of your own choice |
s5-attribution(session storage) |
system5.dev | Holds campaign parameters from the URL so they travel with a form you send. Dies when you close the tab. | Only if you arrived with such parameters |
_ga, _ga_* |
Google Analytics 4 | Distinguishes visits for traffic statistics. | Only after you accept |
_clck, _clsk |
Microsoft Clarity | Ties a session recording together. | Only after you accept |
Nobody we have not named. We do not sell data, we do not share it with advertisers beyond the measurement described above, and we do not pass a teardown request to anyone outside system5.dev. Our processors are Amazon Web Services (hosting and mail delivery), Google and Microsoft (only with your consent), and Google Fonts, which serves the typeface this site is set in.
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable form. Where processing rests on consent, you can withdraw that consent at any time without affecting what happened before.
Write to ip@system5.dev. We answer within 30 days, and usually the same week. If our answer does not satisfy you, you can complain to the Portuguese data protection authority, the CNPD, or to the authority where you live.
This site is addressed to people running a business. It is not directed at children and we do not knowingly collect their data.
If this policy changes, the date under the title changes with it. There is no mailing list here to notify you through, because we do not run one.