Effective 1 September 2026
This site has no accounts, no sign-up, and no tracking of visitors across other sites. What follows is the whole of it.
Standard is operated by a sole practitioner. The operating entity is in formation; when it exists, its registered name, company number and address will be published here and on the legal page.
Until then the controller can be reached at the address on the contact page, and that address is monitored.
A language preference, so a page served under one prefix stays there. A record of your answer to the cookie notice, so you are not asked again. Both are functional and neither identifies you.
Nothing on these pages sets an advertising or cross-site tracking cookie.
Page performance and visit counts are measured with Vercel Analytics and Vercel Speed Insights. Vercel states that both are aggregate and that neither sets a cookie nor builds a profile of a visitor. That is the supplier describing its own product, and Standard cannot verify it from outside — so it is written here as their statement rather than as our finding. What you can check without trusting either of us is your own browser: open the storage panel for this site and read what is actually there.
Neither runs until you have accepted the notice at the foot of the page. Declining, or simply not answering, means the scripts are not loaded at all — not loaded and then asked to stay quiet.
Mail sent to the address on the contact page is used to answer you and, if it leads to work, to carry that work out. It is not added to a mailing list and is not passed to anyone for their own purposes. The contact page's request fields are composed in your browser and handed to your own mail app: no field is posted to this site, and nothing you type there is stored anywhere.
It is kept while the exchange is live, and afterwards for as long as is needed to account for the work. There is no automated retention schedule: the address is a mailbox read by one person, and deletion is done by hand — including when you ask for it.
The site is hosted by Vercel. Sign-in for the authenticated area, which none of these pages use, is handled by Clerk. Application data sits in a Neon-hosted PostgreSQL database, in Frankfurt. Each processes data only to provide its service.
Clerk's own script sends diagnostics about itself to clerk-telemetry.com. That happens on the sign-in and sign-up pages, the only two where this site loads Clerk at all — the content security policy grants that host there and nowhere else, and you can read the policy in the response header of any page here.
On those same two pages, Clerk loads Cloudflare Turnstile for its bot protection. Cloudflare then receives your IP address and browser signals, never the contents of an account. It appears in none of our packages and is named here because the published list is checked against the hosts this site actually reaches on every deployment — a sub-processor of a sub-processor is visible in the security header, not in a dependency file.
You can ask what is held about you, ask for it to be corrected or deleted, object to it being processed, and ask for a copy. Write to the address on the contact page.
You may also complain to the data protection supervisory authority in the country where you live or work.
This page is versioned with the site. When the operating entity exists, this notice is replaced by one naming it, and the date at the top changes.