needs-to-stay is operated by Mark McCracken, trading as Cracksoft (cracksoft.dev). For the personal data we process about you as a user of the Service, we are the data controller. You can contact us about privacy matters at mark@cracksoft.dev.
This policy explains how we collect, use, share and protect personal data, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We rely on the following lawful bases under Article 6 of the UK GDPR:
A page typically contains personal data about people other than you — the subject of the page, and often colleagues, managers, referees or others whose names, roles, quotes or metrics you include.
For that third-party personal data, you are the data controller and we act as your data processor: we process it on your behalf and on your instructions in order to host and display your page. You are responsible for having a lawful basis to use that information and for obtaining any consent that is required, for ensuring it is accurate and fair, and for responding to any rights requests from the people concerned. Our Terms of Service and Acceptable Use Policy set out these responsibilities in more detail. We will assist you, so far as reasonably possible, in meeting your obligations as a controller, and we will only process this data to provide the Service unless the law requires otherwise.
We use a small number of trusted service providers (sub-processors) to run the Service. They process personal data on our behalf under appropriate contractual terms:
Some of these providers may process data outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK data protection law — such as UK adequacy regulations or the International Data Transfer Agreement / the UK Addendum to the EU Standard Contractual Clauses — to ensure your data remains protected.
We may also disclose personal data where we are legally required to do so, or to establish, exercise or defend legal claims.
We use a single, strictly necessary session cookie to keep you signed in and to operate the Service securely. We do not use advertising, analytics or cross-site tracking cookies. Because this cookie is essential to provide a service you have requested, no cookie-consent banner is required. We mention it here for transparency.
Under the UK GDPR you have the right to:
To exercise any of these rights, email mark@cracksoft.dev. We will respond within the timeframes required by law (normally one month). Note that where we act as a processor for third-party personal data on a page, requests from those individuals should ordinarily be directed to the user who created the page (the controller); we will help that user respond and will pass on requests we receive.
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling its helpline.
We take appropriate technical and organisational measures to protect personal data, including encryption in transit, restricted access, and reliance on reputable infrastructure providers. No online service can be guaranteed completely secure, but we work to protect your data and to handle any incident promptly and responsibly.
We may update this Privacy Policy from time to time. The current version, with its "last updated" date, is always published here. Material changes will take effect when published.
For any privacy question or to exercise your rights, contact mark@cracksoft.dev.