Who is responsible
Karwan Stark AB (organisation number 559518-2717), c/o Karwan Stark, 554 49 Jönköping, Sweden, runs bashrock.com under the name Bashrock and is the controller of the personal data described in this policy. Questions about it go to info@karwanstark.se.
The short version
- We collect as little as we can. The site has no analytics, advertising or tracking tools, and loads no scripts or fonts from other companies.
- We use your IP address and browser details briefly, to keep the site secure and available.
- If you contact us, we use what you send to reply and to discuss a possible project.
- We don’t sell personal data, and we don’t use it for profiling or marketing.
What we process and why
When you visit the site
Every request to the site passes through our web server, which records technical details: your IP address, the date and time, the page requested, the referring page, your browser’s user agent and our response. We use them to deliver the site, to find and fix errors, and to detect and stop abuse such as attacks, scraping and spam.
Legal basis: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
Automated security checks
To protect the site and its forms without a third-party CAPTCHA, we:
- count requests from each IP address over short periods, to limit abuse;
- check IP addresses against the CrowdSec threat intelligence network;
- confirm, with a DNS lookup, that visitors who say they are search engine crawlers really are;
- ask your browser to solve a small calculation (“proof of work”) before a form is sent and, while the site is under attack or after your IP address has behaved suspiciously, before a page is shown.
Depending on the result, a request may be shown a check page or refused for a short time. These checks have no legal or similarly significant effect on you, and if one gets in your way you can always email us instead.