Privacy Policy

Last updated: 11 October 2025

Who we are

Penbucks — domain consultancy and portfolio site. For privacy questions, contact info@penbucks.com.

What data we collect

• Basic site logs (Penbucks.com hosting): IP address, user agent, pages visited, and timestamps, for security and troubleshooting. Retained briefly by our host.
• Consent records (when you click Accept/Reject): a pseudonymous user ID, your choice (granted/denied), timestamp, and limited metadata (time zone, referrer, language, user agent). We store only a hashed IP, not the raw IP.
• Analytics (Google Analytics 4, GA4): page URLs/titles, approximate geolocation derived by Google, device/browser info, and events (e.g., page_view). GA4 runs only after consent.
• Short links (pnb.cx): when you click a pnb.cx link we operate, our redirect endpoint records:
  • Requested short URL and its destination
  • Timestamp, user agent, referrer
  • Click parameters if present (e.g., UTM tags)
  • Network-derived info (e.g., country/region from IP); we store a hashed IP in our logs for minimization
  We do not set marketing cookies on pnb.cx; it’s a lightweight redirect used to count clicks and understand traffic sources for our domains and campaigns.

Legal basis

For visitors in the EEA/UK, analytics cookies and related identifiers are used only with your consent (GDPR Art. 6(1)(a)). Hosting and security logs (including pnb.cx redirect logs) rely on our legitimate interests in operating a secure, reliable service (Art. 6(1)(f)).

Cookies & local storage

We keep storage minimal. GA4 identifiers are set only after consent.

Short links on pnb.cx

We use pnb.cx as our own short-link domain. When you follow a short link:

• We log the click to count and analyze traffic sources to our domains or listings.
• No marketing cookies are set by pnb.cx; it performs a server-side redirect.
• Where possible, we minimize data (e.g., store a hashed IP instead of raw).
• If you do not wish to be measured via short links, you can visit the destination URL directly instead of the pnb.cx URL.

How to change your consent

You can withdraw or change your analytics choice at any time:

Google Analytics 4 (GA4)

We load GA4 (gtag.js) directly from Google only after you accept analytics. GA4 is provided by Google LLC and may process data outside your country. See:

• Google Privacy Policy
• How Google uses information from sites
• About Google Analytics 4

Data retention

• Consent logs: up to 24 months (or your internal policy). IPs stored as hashes.
• GA4 data: retention configured in your GA4 property (e.g., 2–14 months for event-level data).
• Server & pnb.cx redirect logs: short retention for security, abuse prevention, and measurement (typically 7–90 days, depending on operational needs).

Your rights

If applicable (e.g., GDPR/UK GDPR), you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability. You can withdraw consent at any time. To exercise rights, email info@penbucks.com.

International transfers

Using GA4 may involve international data transfers. We rely on Google’s safeguards and standard contractual clauses as described in their documentation.

Children

Our site is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this page from time to time and will revise the “Last updated” date above accordingly.