Privacy Policy

Effective Date: July 14, 2026

1. Introduction

This Privacy Policy explains how Skillful Sardine - Unipessoal Lda. ("we," "us," "our") handles information through the sardine.fyi website (the "Service").

Governing Law: This Policy is governed by the laws of Portugal.

2. Data Controller

Skillful Sardine - Unipessoal Lda.
Email: legal@skillfulsardine.com

3. Information We Collect

3.1 Information We DO NOT Collect

We do not collect:

  • Email addresses or contact forms
  • Payment information
  • Cookies of any kind, including tracking cookies
  • Advertising or cross-site tracking data

3.2 Server Request Logs

Our servers record each request they receive. That record includes your IP address, your browser's user agent string, the request headers your browser sends, the address requested, and the time of the request.

An IP address is personal data under the GDPR, and we treat these logs accordingly, even though we never link them to a name. These logs are not anonymous.

We use these logs solely for keeping the Service available, detecting and blocking abuse, diagnosing errors, and identifying broken links. We do not use them to build a profile of you, and we do not sell or share them. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in keeping the Service secure and available.

These logs are retained for a maximum of seven months, then deleted automatically. Residual copies in our backups are deleted within a further 90 days.

3.3 Analytics (Umami)

We use Umami, a privacy-focused analytics platform that collects anonymized data:

  • Page views
  • Browser and device type
  • Country, region, and city (derived from the IP address; the IP address itself is not stored)

Umami does not use cookies and does not store IP addresses. We cannot identify individual visitors from this data.

3.4 vCard Downloads

The vCard file itself contains only the business card owner's public contact information, and nothing about you is added to it. The download request is recorded in the server request logs described in Section 3.2, in the same way as any other page request, and is deleted on the same schedule.

4. Your Rights

Under GDPR, you have the right to access, rectify, or delete any personal data we hold about you. These rights apply to visitors as well as to business card owners, because the server request logs described in Section 3.2 contain your IP address, which is personal data. We extend these rights to all visitors, regardless of location.

All personal data described in this Policy is stored on servers within the European Union and is not transferred outside the EU/EEA. We make no automated decisions about you and do not profile you (Article 22 GDPR).

You may complain to a data protection authority. Our supervisory authority is the Portuguese Comissão Nacional de Proteção de Dados (CNPD), and you may also complain to the authority in your own country.

To exercise your rights, contact us at legal@skillfulsardine.com.

5. Contact

For questions about this Privacy Policy:
Email: legal@skillfulsardine.com