Privacy

Version 1, 5 September 2026. This page says what this website and our contact form collect, why, for how long, and what you can do about it.

Who is responsible

Lindox OrbIT, CVR 36586958, Copenhagen, Denmark, is the data controller. We do not publish an email address; to reach us about your data, use the contact form and put "Privacy" in the subject line.

What we collect, and why

The contact form. Name, email, subject and message are required; phone and company are optional. Your message is sent by email to our mailbox, and a copy goes to you. We use it to answer you (steps before a contract, at your request) and, if we work together, to do the work (contract). Enquiries are kept until they are closed and at most 12 months after our last exchange. If you become a client, the correspondence is kept for the duration of the relationship and as long as Danish bookkeeping rules require.

Your IP address. Used to limit how many messages one address can send per hour, and recorded if sending fails. Legal basis: our legitimate interest in keeping the form working and free of abuse. Logs are deleted after 30 days. The address is stored nowhere else and is never used for analytics.

Language. A cookie remembers whether you chose English or Danish. Necessary; no consent needed.

Your preferences. Render quality and sound on or off are kept in your browser's local storage. They never leave your browser and identify nothing.

Analytics without consent. We count page views ourselves, on our own server. Each visit becomes a hash that changes daily and cannot be turned back into you or your address: no IP address, no identifier, no cookie. It tells us how many people visited which pages, not who.

Analytics with your consent. If you allow it, a random id is stored in your browser's local storage for 30 days so we can see how visits unfold: how far people scroll, which parts of the page are used, and whether the same browser came back. It is a random number, not linked to your name or email, even if you write to us. Legal basis: consent, which you can withdraw at any time with the privacy toggle at the bottom of the page.

Links in our emails. Our confirmation and reply emails contain one link back to this site. It carries a token that tells us the link was opened, and whether it was opened on a phone or a computer. Nothing else about the device, and no tracking beyond that click.

What we do not do

No third-party trackers, no advertising, no social plug-ins, no sale or sharing of your data. The site loads two code libraries (Three.js, jQuery) from public content networks; like any web server, those networks see your IP address when the files are fetched.

Your rights

You can ask what we hold about you, have it corrected or deleted, restrict or object to its use, and receive a copy in a common format. Use the contact form. You can also complain to Datatilsynet, the Danish Data Protection Agency, at www.datatilsynet.dk.

Withdrawing consent

The privacy toggle at the bottom of every page opens your settings. Switching analytics off deletes the visitor id at once. Your choice itself is stored for 12 months so we do not ask again.

Cookies and storage

Changes to this page are dated at the top.