Privacy Policy
Last updated: September 6th 2026
Who we are
pkgbase.org is operated by Andrew Stuart an individual based in the United States. For the personal data described below, we are the “data controller” under the EU/UK GDPR.
What we collect
Server and security logs. Like almost every website, our reverse proxy and bot-protection layer log the IP address, user agent, requested URL, and timestamp of every request, purely to keep the site running and to block abusive or automated traffic. We retain these logs for 90 days and then delete them.
Contact form. If you use the contact form, we collect whatever you type there — your message, and your name/email if you choose to give them — together with the IP address the message was sent from, which is included in the email we receive so we can deal with abuse of the form. This is collected solely so we can reply to you and keep the form working. We keep these messages for 12 months, or until your question is resolved and then delete them. We do not add you to a mailing list.
No accounts. No tracking cookies. pkgbase.org does not require sign-in, does not set tracking or advertising cookies, and does not run third-party analytics.
Legal basis for processing (GDPR Art. 6 / UK GDPR)
- Security logs: legitimate interest (Art. 6(1)(f)) — operating the service and protecting it from abuse.
- Contact form: your consent, given by submitting the form (Art. 6(1)(a)), and our legitimate interest in being able to reply (Art. 6(1)(f)).
Where your data goes
pkgbase.org is hosted on servers located in USA/California. If you are in the EEA or UK, using this site may involve transferring your personal data outside the EEA/UK. We do not sell or share your personal data with third parties for marketing.
Your rights
If GDPR or UK GDPR applies to you, you can ask us to: confirm what personal data we hold about you; correct it; delete it; restrict or object to our processing of it; or give you a portable copy. Use the contact page to ask. You can also complain to your national data protection authority — in the UK, the Information Commissioner's Office; in the EU, your country's supervisory authority.
Data we don't collect
We don't collect payment details, government IDs, location data beyond a coarse IP-derived country/region (used only for abuse detection), or any special-category data.
Changes
If this policy changes materially, we'll update the date at the top of this page.
Contact
Questions about this policy: use the contact page.