Privacy Notice
Last updated: 30 October 2026
Data controller
Anja Polster, Quinta da Terra dos Cantos, Medelim, Portugal
Email: hello@melembro.com
Hosting and server logs
The site is delivered via a Netcup server and the Traefik reverse proxy. Access logs may contain IP address, time, requested resources, HTTP status and technical client information. The verified log rotation runs daily and retains three rotated files plus the active file; this does not establish deletion after exactly three days. URL query parameters are dropped according to the reviewed Traefik configuration. Client IP anonymisation has not been verified. The purposes are delivery and security of this website, relying on Article 6(1)(f) GDPR where applicable.
Backups
Encrypted off-site backups use a Hetzner service. The exact product (Storage Share or Storage Box) and storage location remain to be verified. The observed backup policy retains up to seven daily, four weekly and six monthly restore points; this is not a fixed deletion period for individual records. Data coverage and restoration remain to be verified.
Analytics
This site includes a local consent mechanism for our self-hosted Umami analytics. Analytics is loaded only after you actively select “Allow analytics”, and only when a dedicated ME LEMBRO website ID is configured and the site runs on an allowed HTTPS domain. That ID has not yet been confirmed, so tracking is currently technically disabled. Your choice is kept in browser localStorage and can be changed via “Analytics preferences” in the footer. Once active, Umami may collect page views and technical usage information. Processing details and retention must be finalised before activation.
The choice (“allow” or “deny”) is primarily stored in localStorage for this website origin under the brand-specific key melembro-maintenance-analytics-consent-v1. If localStorage is unavailable, a strictly necessary first-party cookie for consent management with the same key may be used for up to 12 months (path /, SameSite=Lax). This cookie is not used for analytics. Your choice applies only to this website and can be changed using Analytics preferences. On withdrawal, the page may reload to stop tracking that has already started.
Cookies and external resources
The static site uses localStorage for the analytics preference rather than a cookie. Images, CSS and fonts are served locally. The analytics script is not loaded without consent. Other upstream technologies remain subject to separate assessment.
Email contact
If you contact us by email, the data you provide is processed to handle your request. Depending on the request, the legal basis is Article 6(1)(b) or (f) GDPR.
Your rights
Subject to GDPR requirements, you may have rights of access, rectification, erasure, restriction, portability where applicable and objection. You may complain to the Portuguese data protection authority, the CNPD.
Information pending verification
Still to verify: dedicated ME LEMBRO Umami ID, analytics retention, hosting and backup location, processing agreements, complete business address and final legal review. This notice is not yet legally approved.