Privacy

Last changed 11 October 2026.

Nothing follows you to other sites: no cookies, no ad trackers, no analytics company. This page says exactly what this site keeps, why, and for how long. If that ever changes, this page changes first.

Who we are

This site is run by ATX Works, an AGI Inc. company, in Austin, Texas. That is who holds everything described here. Write to hello@atxworks.dev.

If you write to us

The contact form sends us your name, your email and your message, and how long the page had been open, which tells people from programs. The form itself stores none of it: it hands your message on and forgets it. Resend carries it to our mailbox, which Google (Workspace) holds; our replies to you live there too. We keep messages for up to three years after we last wrote to each other, then delete them, or sooner if you ask. We reply from an @atxworks.dev address and never add you to a list.

How we count visits

We count visits with our own counter, ClickCrooks, on our own server. For each visit it keeps:

• the page, the page you came from, and which ad sent you, if one did;
• how long the page was open, how far down you scrolled, how many pages you saw, and whether a form was started or sent or a phone number tapped (never what you type);
• what your browser says about itself, and whether the visit looks like a program rather than a person;
• the city, region and country, a map point for that city, and the name and kind of your network, worked out on our server.

It doesn't keep your internet address in its records. It keeps a marker made from it with a key that never leaves our server, different for every site and every month, so a repeat visit can be counted. We never try to turn one back into an address. To count one visit as one, it keeps a short note in your browser tab that ends when you close the tab; it isn't a cookie. If your browser sends the Global Privacy Control signal, the counter records nothing (your browser still fetches the counter's file, which the counter's server notes like any other request, below).

What our servers keep

Like every web server, ours writes down each request: the address it came from, the page, the page before it, the time and what the browser said about itself. The counter's server keeps the same kind of record. We keep these for 30 days, for two things: security, and the visitor map on our own desk, which shows where visits come from and keeps the same details for the same 30 days.

Anything that attacks or probes the site (looking for passwords, admin pages or weak spots) goes into our security log with its internet address and browser, and stays there for one year. Programs that probe the site, or pretend to be a browser, are turned away for a day, or a week if they come back. Anything that is refused many times in a few minutes is also turned away for a day. A VPN on its own never gets anyone turned away.

If your browser has trouble reaching this site, or refuses something on a page that we didn't put there, Chrome and Edge may send us a short report: the page, what went wrong, the server it reached, your browser's name and your internet address. Those go into the security log for a year.

Our database is copied every night, and each copy is kept for about a month on two servers. So a detail can outlast its own period by about a month in a copy, then it's gone.

Why we keep these

Your messages: because you wrote to us and want an answer. The request records, the counter and the security log: because we have a real interest in keeping attackers off this site and away from the people who use it, and in knowing what people read here. Under the GDPR that is "legitimate interest", and this page is how we tell you about it.

Where it lives, and who else touches it

• Hetzner rents us our servers, in Germany.
• Google holds our mailbox (Google Workspace): your message and our replies.
• Resend carries the contact form's message to that mailbox, and keeps a copy for a limited time under its own policy.

Google and Resend are US companies, so a message you send through the form is handled by them and may be stored in the US. Nobody else touches any of this: no data broker, no advertising network, no analytics company.

We don't sell or share any of it. The exceptions: we report an attacker's address to the network it came from; we give the record of an attack to the police when this site or the people who use it are attacked; and we hand over what the law requires of us, such as a valid court order.

What you can ask for

A copy of anything we hold about you, a correction, or deletion. Write to hello@atxworks.dev and a person will do it. You don't need to give a reason. Two limits, said up front: the security log keeps its full year, because a record with lines taken out can't show what happened; and the nightly copies age out on their own within about a month.

We apply the GDPR to everyone, wherever you live: one standard for everybody. If you're in the UK or the EU and think we've got something wrong, you can complain to your data protection authority, though we'd like the chance to put it right first.

If this page changes

The date at the top changes and we say what changed. If we would start keeping something new about you, this page says so before it starts.