Privacy

Last updated 26 October 2026.

This site has no accounts, no sign-up, no newsletter, no comments and no shop. It never asks you for anything, and there is no form on it to type into. What follows is the little that is collected anyway, by the services that deliver the pages and count the visits.

Who is responsible

The controller of any personal data described here is:

Samu Leino, Finland privacy@unseencosmos.com

Write to privacy@unseencosmos.com for anything on this page, including any request described under Your rights or California residents below.

What is collected

Server and delivery data

The site is hosted on Cloudflare Pages. Like every web server, it processes the information your browser sends in order to deliver a page and to keep the service running: your IP address, the page requested, the referring page if there is one, your browser and operating system, and the time of the request. Cloudflare also uses this information to block attacks and abusive traffic.

Visit measurement

Pages carry Cloudflare Web Analytics. For each page view it records:

It does not set a cookie, does not write to your browser’s storage, does not fingerprint your device and does not follow you to other sites. Nothing links one of your visits to another, which is why this site has no cookie banner: nothing is stored on your device for it to ask about.

Fonts and scripts

Typefaces and all scripts, including the 3D views, are served from this domain. Loading a page sends nothing to any other company.

What is not collected

No name, no email address, no account, no password, no payment information, no precise location, no behavioural profile, no cross-site tracking, and no data about you from any other source.

Cookies

This site sets no cookies and uses no local storage. If your browser shows a cookie for this domain, it did not come from here.

Advertising

There is no advertising on this site at the time of writing. The intention is to carry display advertising in future. Advertising networks commonly set cookies, read identifiers and build profiles for targeting, and that would be a real change to this page.

If and when advertising starts, this policy will be updated before the first ad appears, with the network named, the data it receives described, and, where the law requires it, a consent choice and an opt-out offered. A refusal will be remembered, and a browser sending a Global Privacy Control signal will be treated as a refusal without being asked.

Why this is lawful (GDPR)

For visitors in the European Economic Area and the United Kingdom, the legal basis for processing server and measurement data is legitimate interests under Article 6(1)(f) of the GDPR: operating a website, keeping it secure, and knowing in aggregate which pages people read. The measurement is cookieless and anonymous, no profile is built, and nothing is combined with any other source.

Where the data goes

Cloudflare, Inc. is established in the United States and processes data there and in other countries. Transfers out of the EEA rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the recipient participates in it, and otherwise on Standard Contractual Clauses.

Cloudflare is the only company involved. No data from this site is sold, rented, or shared for advertising.

How long it is kept

Visit measurement is retained in aggregated form for up to six months. Cloudflare’s own security and server logs are kept according to its retention schedule, typically days rather than months.

Your rights

If you are in the EEA or the UK, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Write to the address above.

Because this site stores nothing that connects a visit to a person, it is usually not possible to find your data in order to show or delete it. Article 11 of the GDPR covers this: a controller is not required to collect extra information purely to be able to identify you. If you can supply enough detail to isolate a record, it will be acted on.

There is no automated decision-making and no profiling on this site.

If you believe your data has been handled wrongly, you may complain to a supervisory authority. In Finland that is the Office of the Data Protection Ombudsman, Lintulahdenkuja 4, 00530 Helsinki, https://tietosuoja.fi. You may also complain to the authority in your own country.

California residents

This section is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), whether or not this site meets the thresholds that make those laws binding.

In the twelve months before the date at the top of this page, the following categories of personal information were collected:

CategoryWhat it is hereWhyWho receives it
IdentifiersIP addressDelivering pages, securityCloudflare
Internet or network activityPages viewed, referring page, browser, operating system, device type, performance timingsOperating and measuring the siteCloudflare
Geolocation (coarse)Country, derived from IP and not stored with itAggregate statisticsCloudflare

No other category is collected, and no sensitive personal information.

This site does not sell or share personal information as the CCPA and CPRA use those words, and has not done so in the preceding twelve months. A Global Privacy Control signal is honoured as a valid opt-out request.

You have the right to know what is collected, to delete it, to correct it, and not to be treated differently for exercising these rights. Write to privacy@unseencosmos.com. A response will follow within 45 days, and there is no charge.

Children

This site is written for a general audience and is not directed to children under 13. No personal information is knowingly collected from children, and nothing on the site asks anyone to submit information.

Changes to this policy

Any material change, above all the start of advertising, will be made on this page with the date at the top changed.