Service providers. The site is delivered through three providers, each of which processes the IP address and standard request metadata of visitors as part of their service. Cloudflare (DNS, CDN, edge security), Framer (Hosting) and Google (Emails). We do not retain server logs ourselves; the providers handle transient delivery and security operations on their own retention schedules.

Email correspondence. Email sent to security@vsmcodex.org or info@vsmcodex.org is processed by Verusum, the maintainer of vsmcodex, for the sole purpose of responding to the inquiry. Correspondence is retained for as long as needed to handle the matter, then archived. We do not share, sell, or process the content for any other purpose.

Your rights. Under the UK Data Protection Act 2018, the UK GDPR, and the EU GDPR (for EEA visitors), you have rights of access, rectification, erasure, restriction, portability, and objection. To exercise these rights, contact info@vsmcodex.org. You also have the right to lodge a complaint with the UK Information Commissioner's Office or your local supervisory authority.

Data controller. The data controller is Verusum, United Kingdom.

Updates. This notice is reviewed annually or whenever the site's data practices change.