The People's
Privacy PolicyLast updated: 5 November 2026

Everything on OnzeServer is shared — except you. Your personal data is the one thing the Collective refuses to redistribute. This page says, in plain words between the jokes, what data we process, why, how long we keep it, and how to make us forget. The plain words are legally the ones that count.

Who is responsible

OnzeServer (onzeserver.org and its subdomains) is a private, non-commercial server operated from the Netherlands (the "operator"). It is a hobby, not a company. The operator is reachable at privacy@onzeserver.org and answers within one month, which on the Collective's melting clocks is still 14:00.

This website

This public site is static. It sets no cookies, runs no analytics, loads nothing from third parties and does not know who you are. The parrot would like to know, but the parrot has been overruled.

Technical data

Like any server on the internet, OnzeServer keeps short-lived technical logs: IP address, time, requested address and browser type, used only to keep the server secure and to find out why the fish unplugged something. Logs are kept for at most 14 days. Public traffic reaches the server through Cloudflare, which processes the same connection data as a network provider under its own privacy policy.

Google account data

Some of the Collective's services can be entered with a Google account. When that happens, the service requests only the basic Google profile scopes openid, email and profile, and receives and stores:

• your e-mail address, used as your account name and to check that you are expected;
• your name and, if present, your profile picture, shown inside the service;
• the Google account identifier that links your Google account to your account on the server.

The Collective does not request access to your Gmail, Calendar, Contacts, Drive, Photos or any other Google data, and never receives your Google password. Google user data is used only to recognise you and show your name and picture inside the service; it is never used for advertising, never sold, and never passed to anyone else. OnzeServer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can withdraw the server's access to your Google account at any time at myaccount.google.com/permissions.

Data you create

Anything you put into one of the Collective's services (a note, a plan, a list of pirates) is stored on the server so it can be shown to you and to the people you choose to share it with. It is used for nothing else. Not even the parrot reads it.

Cookies

The services use strictly necessary session cookies to remember that you are you between one page and the next. No advertising cookies, no tracking cookies, no cookies for the parrot.

Sharing

Personal data is not sold, rented or shared for marketing. It is passed only to Google (to complete a sign-in you started yourself) and to Cloudflare (to deliver the connection), and to authorities only where the law requires it. Jasper's momma has asked for a copy; the request was denied on the grounds that it would not fit through the door.

Storage and retention

All data lives on hardware the operator owns, in the Netherlands, and in encrypted backups of that hardware. Account data is kept for as long as the account exists. When the account is closed, or when you ask, your profile data is removed from the server and, with the normal backup rotation, from the backups. Technical logs: 14 days. The horizon: abolished, retention not applicable.

Your rights

Under the GDPR you may ask to see the personal data held about you, to have it corrected or deleted, to receive a copy, or to object to its processing. Write to privacy@onzeserver.org. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), who are very real and do not melt.

Children

The Collective's services are not aimed at children under 16, and no accounts are created for them. The parrot is 4, but the parrot is a parrot.

Changes

If this policy changes, the new version appears here with a new "last updated" date. Significant changes are also told to the people with an account, by the fish, in writing.