Privacy Policy

1. Purpose of the Project

The Tandara Digital Family Archive is intended for the preservation, research and presentation of information relating to the origin, genealogy, migration, history, photographs, documents and memories of the Tandara family.

The project is divided into a public section and a protected private section so that historical and genealogical material can be preserved without unnecessarily exposing information about living individuals to the public.

2. Public and Private Sections of the Archive

The public and private sections of the Digital Archive are technically separated. The public section contains material intended for unrestricted viewing, while the private section is intended for information that is not published publicly.

Shared technical files, such as certain styles, scripts, icons and other general files which do not themselves contain private genealogical information, may be used from the shared part of the project.

3. Genealogical Information That May Be Public

Information about confirmed deceased family members may be displayed publicly, as may information about persons born in 1930 or earlier who, according to the available sources, their age and family context, may reasonably be regarded as belonging to deceased generations.

A person born after 1930 may be displayed publicly when their death has been confirmed.

If the year of birth is unknown, the information may be treated as part of the public historical record when reliable family and genealogical relationships clearly show that the person belongs to an older, deceased generation.

4. Protected Information of Living Individuals

Names, years of birth, places of residence, photographs, family details and other information concerning living individuals, as well as persons born after 1930 whose death has not been confirmed, are not published in the public genealogical display where publication would interfere with the person's privacy.

The public genealogy may retain an anonymous internal genealogical identifier or code showing that a particular position in the family tree exists, but such an identifier should not itself reveal personal information.

More complete information about such individuals belongs to the separate private section of the archive and is available only to persons whose access has previously been approved.

5. Information You Submit Voluntarily

Through the Contact and Collaboration page, you may voluntarily provide your full name, city / place and country, e-mail address, information about your family branch, your connection with the Tandara family, the type of request, your message, and your decision as to whether you permit public publication of the message, your name and your location.

Photographs, documents and other material may be provided later during subsequent e-mail communication.

Please do not submit more personal information than is necessary for the specific request, verification or genealogical addition.

6. How Submitted Information Is Used

Submitted information may be used to reply to a request, verify genealogical information, correct existing information, supplement the family archive, process a document or photograph, and for possible collaboration on the project.

A message intended for Visitor Messages is published only if the sender has given permission for its public publication.

The sender's e-mail address is not published in Visitor Messages.

Information is not sold, rented or used for sending unsolicited commercial messages.

7. Contact Form and FormSubmit

The contact form uses the external FormSubmit service to deliver messages to the project author's e-mail address.

When the form is submitted, the information entered into it passes through that service so that the message can be delivered. The form also uses basic protection against automated unwanted messages.

8. Visitor Statistics

Certain public pages use FlagCounter to provide an aggregate display of visits by country.

When this external service is loaded, the browser connects to its server, and the service provider may receive technical information required to deliver the content, such as the IP address, request time and browser information.

Genealogical content is not sent to FlagCounter as a separate set of genealogical data.

The current version of the project does not use Google Analytics. If an analytics system is introduced again in the future, this policy will be updated accordingly beforehand.

9. Interactive Maps and External Content

The migration page uses the Leaflet library and OpenStreetMap map tiles.

When a map is opened, the browser connects directly to the external servers required to load the library and map tiles.

These services may receive technical information such as the IP address, request time, browser type and the requested file or map tile.

The website uses the strict-origin-when-cross-origin rule, which limits the amount of information about the page address sent as a referrer when requests are made to another internet domain.

10. Private Access and Cloudflare

The private section of the archive is maintained separately from the public content.

For its publicly accessible entry address, Cloudflare is intended to serve as an intermediary security layer through which access permission is checked before a user can open the protected content.

In providing technical delivery, protection and access verification, Cloudflare may process information needed for those functions, such as the IP address, access time, browser information and security session identifiers.

The name or existence of a private repository does not itself constitute permission to access its content. Protected information must not be accessible through a direct public address that would bypass the intended access control.

11. Cookies and Technical Sessions

The public section of the project does not itself set its own analytics cookies.

External services used on certain pages may use their own technical mechanisms in accordance with their respective policies.

The private system may use only those cookies, security tokens or session information that are necessary for sign-in, permission verification and protection of private content.

12. Security and Separation of Information

The project's basic security measure is the separation of public content from protected information.

The public repository should not contain information which, according to the rules of the project, is intended only for the private archive.

The private source repository and production access to the private website must remain protected against unauthorised public access.

Technical protection may include repository protection, HTTPS, access control at the intermediary layer and other security rules provided by the service provider.

13. Correction and Removal of Information

If you believe that information about you is inaccurate, outdated, unnecessary or should not be displayed publicly, you may request that it be reviewed, corrected, restricted or removed.

You may also withdraw permission previously given for the public publication of your message, name, location, photograph or other content submitted voluntarily.

14. Privacy Contact

For questions concerning privacy, or to request correction or removal of information, please use the Contact and Collaboration page.

15. Changes to This Policy

This Privacy Policy may be updated when the project content, method of public or private access, external services used, or technical infrastructure changes.

Last updated: 16 September 2026.