Privacy Policy

This Privacy Policy applies to the website TANDARA-SURNAME, available at https://tandarajure-crypto.github.io/Tandara/.

1. Purpose of the Website

The website has been created to preserve the history, genealogy, migration records, family heritage and historical information related to the Tandara family line.

2. Information You May Voluntarily Provide

Through the contact form you may voluntarily submit your name, surname, place of residence, country, e-mail address, relationship to the Tandara family, photographs, historical documents, family records or any other information you choose to share.

3. How Your Information Is Used

Submitted information is used solely for responding to inquiries, verifying genealogical information, expanding the family archive, evaluating historical materials and communicating with contributors.

Personal information is never sold, rented or used for unsolicited marketing communications.

4. Public and Private Genealogical Information

The public archive includes confirmed deceased family members and people born in 1930 or earlier who, based on their age and family context, can reasonably be regarded as deceased.

A person born after 1930 also remains public when their death has been confirmed. A person without a known birth year may remain public when parents, siblings, spouse or children reliably place that person in an older deceased generation.

Names, birth years, current residence and family details of living people, as well as people born after 1930 whose year of death has not been entered or confirmed, are removed from public view. Only anonymous genealogical numbers may remain in the public view as internal markers showing that a person's record exists and is linked to the appropriate position in the family tree. These numbers do not themselves contain a name, date of birth, place of residence or contact information and do not provide access to the private record. Access to protected information is not permitted without valid prior approval from the administrator of the separate private archive. Email verification alone does not grant access: every request is reviewed and approved manually.

Photographs of such people that have already appeared in publicly accessible online interviews may remain publicly displayed in a neutral context, without names or genealogical links, together with a clear privacy notice. View the publicly published photographs.

If you believe that published information is inaccurate, outdated or should not appear on this website, you may request correction, restriction or removal.

5. Contact Form and FormSubmit

The contact form uses the FormSubmit service to deliver submitted messages to the website administrator by e-mail.

The form includes several anti-spam mechanisms, including CAPTCHA verification, a hidden honeypot field and blacklist protection against automated spam submissions.

6. Website Analytics

The public pages use Google Analytics for visit statistics and FlagCounter to display aggregate visitor information by country. These tools are loaded as external services and may receive technical data required to provide their functions. Genealogical information is not sent to those services as part of the analytics content.

The separate private family archive does not use these tools to profile users. Rules for private access are handled separately and are limited to functions necessary for sign-in and approval checks.

7. Interactive Maps and External Sources

The migration pages use the Leaflet library delivered through unpkg.com and OpenStreetMap map tiles delivered through tile.openstreetmap.org. When those maps are opened, the visitor's browser connects directly to these external services.

These services may receive technical information required to deliver the requested content, such as the IP address, request time, browser type and requested map tile. Leaflet files and map-tile requests use a no-referrer policy, so the address of the current page is not sent with those requests. This website does not use that information to create personal profiles or connect it with genealogical records.

8. Cookies and Private Access

The private portal does not use analytics cookies. It uses only a necessary security session for authentication, approval checks and protection of private content.

9. Separate hosting of the private portal

The private portal is separate from the public website and is hosted on Cloudflare infrastructure. In providing and protecting the site, Cloudflare may technically process information necessary for the service to operate, such as the IP address, access time and browser information. The project’s basic rule remains unchanged: private content and information concerning protected persons are not published in the public repository.

10. Security Measures

The website uses security measures appropriate for a static website, including Content Security Policy (CSP), restrictions on content sources, protection against mixed content and blocking of unsafe embedded objects. Embedded interactive content is additionally restricted through iframe permissions. The website itself does not request access to the camera, microphone, geolocation, payment interfaces or USB devices.

11. Your Rights

You may request information regarding personal data relating to you, correction of inaccurate information, removal of information, restriction of publication or withdrawal of previously granted consent.

12. Contact

For any privacy-related questions or requests concerning correction or removal of personal information, please use the Contact & Collaboration page.

13. Changes to this Privacy Policy

This Privacy Policy may be updated periodically to improve security, reflect changes to the website or comply with applicable legal or technical requirements.

Last updated: August 25, 2026.