Privacy & your data

Updated 11 November 2026. This notice covers the Shardhaven development mailing list. Shardhaven is the new name of the project previously presented as NWN Hosting; the purpose of the list is unchanged. Earlier consent records retain their original wording.

Who is responsible?

Shardhaven, based in the Netherlands. Address: <redacted>. Privacy contact: privacy@shardhaven.com.

What we collect and why

With your consent, we store your email, optional interest, signup and confirmation times, and the wording and version of your consent. We use these for occasional development updates and future testing invitations. Subscribing does not guarantee testing access.

We temporarily store hashed connection addresses and email hashes for request throttling, for up to one hour, to protect the service from abuse. We use no analytics, advertising trackers, or cookies. Choosing Daylight or Dusk stores only that preference in your browser; it is not sent to us.

Confirmation, retention and withdrawal

Subscriptions require confirmation within 48 hours. Expired unconfirmed records are deleted by the daily maintenance command. Confirmed records remain until you unsubscribe or the list closes. Every update must include a personal unsubscribe link. Opening that link and selecting Unsubscribe deletes your live mailing-list record. Request links are protected like passwords.

Rolling backups must expire within 30 days. A separate withdrawal journal retains a hash of an unsubscribed email and its withdrawal time for 31 days, solely to prevent older backups from reactivating that subscription. Recovery reconciles snapshots against the current journal before any email can be sent.

Service providers and international transfers

Subscription data is stored on infrastructure operated by our hosting provider.

We do not sell your subscriber information. Access is limited to the operator and service providers needed to run the list.

Your rights

Contact the privacy address above to request access, correction, erasure, restriction, or a portable copy of your information, or to withdraw consent. You may complain to the Dutch Autoriteit Persoonsgegevens or your local supervisory authority. Withdrawal does not affect earlier lawful processing.