Privacy Policy

This Privacy Policy applies to the website TANDARA-SURNAME, available at https://tandarajure-crypto.github.io/Tandara/.

1. Purpose of the Website

The website has been created to preserve the history, genealogy, migration records, family heritage and historical information related to the Tandara family line.

2. Information You May Voluntarily Provide

Through the contact form you may voluntarily submit your name, surname, place of residence, country, e-mail address, relationship to the Tandara family, photographs, historical documents, family records or any other information you choose to share.

3. How Your Information Is Used

Submitted information is used solely for responding to inquiries, verifying genealogical information, expanding the family archive, evaluating historical materials and communicating with contributors.

Personal information is never sold, rented or used for unsolicited marketing communications.

4. Public and Private Genealogical Information

The public archive includes confirmed deceased family members and people born in 1930 or earlier who, based on their age and family context, can reasonably be regarded as deceased.

A person born after 1930 also remains public when their death has been confirmed. A person without a known birth year may remain public when parents, siblings, spouse or children reliably place that person in an older deceased generation.

Names, birth years, current residence and family details of living people, as well as people born after 1930 whose year of death has not been entered or confirmed, are removed from public view. Only anonymous genealogical numbers may remain in the public view as internal markers showing that a person's record exists and is linked to the appropriate position in the family tree. These numbers do not themselves contain a name, date of birth, place of residence or contact information and do not provide access to the private record. Access to protected information is not permitted without valid prior approval from the administrator of the separate private archive. Email verification alone does not grant access: every request is reviewed and approved manually.

Photographs of such people that have already appeared in publicly accessible online interviews may remain publicly displayed in a neutral context, without names or genealogical links, together with a clear privacy notice. View the publicly published photographs.

If you believe that published information is inaccurate, outdated or should not appear on this website, you may request correction, restriction or removal.

5. Contact Form and FormSubmit

The contact form uses the FormSubmit service to deliver submitted messages to the website administrator by e-mail.

The form includes several anti-spam mechanisms, including CAPTCHA verification, a hidden honeypot field and blacklist protection against automated spam submissions.

6. Website Analytics

This website uses Umami for basic website statistics without cookies and without tracking visitors across different websites. URL search parameters and hash fragments are excluded from analytics, and the browser's Do Not Track setting is respected.

When receiving a request, the analytics server may technically process the IP address and standard connection data. The tracker does not send names, e-mail addresses, contact-form contents or genealogical records.

The website also uses FlagCounter to display visitor statistics by country. Because the counter is loaded as an image from an external server, that server may receive the IP address, request time and browser information. Sending the current page address as a referrer is disabled.

7. Interactive Maps and External Sources

The migration pages use the Leaflet library delivered through unpkg.com and OpenStreetMap map tiles delivered through tile.openstreetmap.org. When those maps are opened, the visitor's browser connects directly to these external services.

These services may receive technical information required to deliver the requested content, such as the IP address, request time, browser type and requested map tile. Leaflet files and map-tile requests use a no-referrer policy, so the address of the current page is not sent with those requests. This website does not use that information to create personal profiles or connect it with genealogical records.

8. Cookies and Private Access

Umami analytics on the public website does not use cookies. The separate private portal uses a necessary security session solely for authentication, approval checks and protection of private content.

9. GitHub Pages Hosting

The website is hosted on GitHub Pages. GitHub may process technical information required for delivering the website, including IP address, browser information and access timestamps.

10. Security Measures

The website uses security measures appropriate for a static website, including Content Security Policy (CSP), restrictions on content sources, protection against mixed content and blocking of unsafe embedded objects. Embedded interactive content is additionally restricted through iframe permissions. The website itself does not request access to the camera, microphone, geolocation, payment interfaces or USB devices.

11. Your Rights

You may request information regarding personal data relating to you, correction of inaccurate information, removal of information, restriction of publication or withdrawal of previously granted consent.

12. Contact

For any privacy-related questions or requests concerning correction or removal of personal information, please use the Contact & Collaboration page.

13. Changes to this Privacy Policy

This Privacy Policy may be updated periodically to improve security, reflect changes to the website or comply with applicable legal or technical requirements.

Last updated: August 5, 2026.