What this website collects, which is almost nothing

The contact form

The form on the contact page collects your name, your email address, your institution or association if you choose to give it, the topic you select, and your message.

When you submit it, that information is emailed to hello@alumdeck.com and kept in our mailbox so we can reply and keep track of the conversation. The email also records the IP address the message came from and the time it was sent, which is how a spam message gets identified later.

We use it to answer you. It is not added to a mailing list, not used for marketing, and not sold, rented or shared with anyone. There is no customer database behind this website.

Spam protection on the form

The form has a hidden field that people never see and automated scripts usually fill in. If it is filled in, the message is discarded.

To stop one sender flooding the inbox, the endpoint keeps a small counter. It stores a one-way hash of your IP address in a temporary file, with a timestamp. Entries expire after an hour and the file holds nothing else. The hash cannot be turned back into your address.

Cookies

This website sets no cookies. There is no cookie banner because there is nothing to consent to. Nothing is written to local storage either.

If that changes, this page changes first and the banner arrives second.

Analytics and tracking

There is none at present. No Google Analytics, no tag manager, no heatmap tool, no session recorder, no advertising pixel and no A/B testing script. We do not know which pages you read.

Third-party content

No third-party scripts are loaded on this site. Fonts, images, stylesheets and the one small JavaScript file are all served from alumdeck.com, so your browser is not asked to contact anyone else while you read.

There are no embedded videos, no maps, no chat widget and no social media buttons that phone home.

Server logs

Like every website, this one runs on a web server that keeps standard access logs: the page requested, the time, the browser's user agent and the IP address. These are ordinary hosting logs, used for security and to work out whether something is broken, and they are not combined with anything else or used to build a profile.

How long we keep things

Contact-form emails stay in the mailbox while the conversation is useful, and are deleted when it is not. Spam-protection entries expire within an hour. Server logs are rotated by the host on its normal schedule.

AlumDeck runs on your server. Your members register on your site, their profiles are written to your database, their photographs are stored in your uploads folder, and your backups are made by you.

None of it reaches us. We have no copy, no access, no dashboard showing your member count and no ability to read your records. There is nothing for us to hand over if we are asked for it, and nothing of yours to lose if we are breached.

The software does not phone home. It does not need to contact our servers to load a page, verify a licence or run any feature, so it keeps working whether or not we exist next year.

Which also makes it your responsibility

Being the only holder of your alumni data means you are the data controller for it. Backups, access control, security updates and any privacy notice your own members are shown are yours to handle. AlumDeck includes the tools, including cookie consent and per-member visibility settings, but the duty is yours.

If your institution is bound by a particular regime, that is between you and your regulator. We are not in the chain, because your data never leaves your infrastructure.

Questions about privacy, about what your own members would be told, or about how a self-hosted install affects your institution's obligations are all fair, and none of them is a sales conversation.

Use the contact page or email hello@alumdeck.com. A person replies within one working day.