Applies to: venkel.dev Effective date: 15 October 2026 Last updated: 15 October 2026 Version: v0.1 (draft, pending legal review)
Plain-language summary
venkel.dev is the marketing website for Venkel, a repository assessment service from Plausible Industries LLC. The site has no accounts, forms, purchases or uploads. Our host processes your IP address to deliver pages, your browser fetches fonts from Google, and Google Analytics runs only if you accept it. If you email us, we keep your message to reply. We do not sell your information or share it for advertising. Client code and data assessed in an engagement are not covered here; the engagement contract governs them.
1. Who we are
venkel.dev is operated by Plausible Industries LLC, a California limited liability company ("Plausible Industries," "we," "us," or "our"). Under the EU and UK General Data Protection Regulation ("GDPR"), we are the controller of the personal data described in this Policy.
Plausible Industries LLC, Attn: Privacy, 2108 N St Ste N, Sacramento, CA 95816, United States. Email: privacy@plausibleindustries.com
2. Scope
This Policy covers your visit to venkel.dev and email you send us from it. It does not cover:
- Engagement data. When an organisation engages us to assess its repositories with Venkel, the source code, repository metadata, contributor information and reports involved are never uploaded to or processed through this website. That data is governed by the engagement letter and data processing agreement ("DPA") with that client, under which we generally act as the client's processor. Questions about engagement data should go to the client organisation, or to us citing the engagement.
- The demo report, which is built entirely from fictional data and contains no information about real people, repositories or organisations.
- Third-party websites we link to.
3. What we collect
3.1 Request data (hosting)
The site is stored in Amazon S3 and delivered through Amazon CloudFront by Amazon Web Services, Inc. ("AWS"). To deliver a page, CloudFront receives your IP address, the page requested, date and time, browser user-agent and referring page.
We have not enabled CloudFront access logging, so we keep no record of these requests ourselves; AWS may keep limited operational and security logs under its own terms. If we enable access logs (for example, to investigate abuse), we will keep them no longer than 90 days.
3.2 Google Fonts
The site loads typefaces from Google Fonts (Google LLC). Your browser connects directly to Google and sends your IP address, user-agent and referring page. This happens on every page load, regardless of your cookie choice. Google states that the Fonts service does not set cookies and does not use font requests to profile users or target ads.
3.3 Google Analytics 4 (only with your consent)
Only if you choose Accept all, or switch Analytics on under Customize, do we load Google Analytics 4 ("GA4"). GA4 then sets cookies and records pages viewed, time on page, referring site, device and browser type, and approximate location (city or region) derived from your IP address. Our configuration:
- IP anonymisation requested (
anonymize_ip). Google states that GA4 does not log or store IP addresses - Google signals disabled: no linking to signed-in Google accounts or cross-device tracking
- Ad personalisation signals disabled: GA4 data is not used for advertising
- Data retention set to 14 months for user- and event-level data
GA4 does not load if you do nothing, choose Reject non-essential, or your browser sends a Global Privacy Control ("GPC") signal.
3.4 Email you send us
The only contact method on the site is a mailto link. If you email us, we receive your name, email address, message, attachments and anything in your signature (such as job title and employer). Please do not send source code, credentials or other confidential material before an engagement and confidentiality terms are in place.
3.5 What we do not do
No accounts, sign-up, newsletters, web forms, payments or uploads. No advertising cookies, social media pixels, session recording or fingerprinting.
4. Purposes and legal bases
| Data | Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Request data | Deliver the site; keep it secure | Legitimate interests in operating a secure website (Art. 6(1)(f)) |
| Google Fonts request | Display the site's typefaces | Legitimate interests in consistent presentation (Art. 6(1)(f)) |
cookie_consent cookie |
Remember your cookie choice | Strictly necessary; legal obligation to record consent and legitimate interests (Art. 6(1)(c), (f)) |
| GA4 data | Understand which pages are useful; improve the site | Your consent (Art. 6(1)(a)), as also required for non-essential cookies under ePrivacy rules and the UK PECR |
| Reply to you; discuss a possible engagement; keep business records | Steps at your request before a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) | |
| Any of the above | Comply with law; establish or defend legal claims | Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) |
You may withdraw analytics consent at any time (Section 6) without affecting earlier processing. We make no automated decisions with legal or similarly significant effects.
5. Who receives your information
| Recipient | Role | Data |
|---|---|---|
| Amazon Web Services, Inc. | Hosting and content delivery | Request data |
| Google LLC | Google Fonts; GA4 (consent only) | Font requests; GA4 data |
| Our email provider | Business email | Messages you send us |
We may also disclose information to a counterparty in a merger, acquisition, financing or asset sale (who must honour this Policy), or where we believe in good faith that law requires it or it is needed to protect the rights, property or safety of Plausible Industries or others.
We do not sell your personal information or "share" it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act ("CCPA").
6. Cookies and Global Privacy Control
A banner on your first visit offers Accept all, Reject
non-essential (the default) and Customize. Your choice is stored
in a first-party cookie_consent cookie for one year; change it any time
with the "Manage cookie preferences" footer link.
If your browser sends GPC, we treat it as a refusal of analytics and
an opt-out of sale and sharing: GA4 does not load, the banner is not
shown, and "analytics denied" is recorded in cookie_consent. GPC
overrides any earlier choice. See the Cookie Policy.
7. Retention
| Data | Retention |
|---|---|
| Request data | Not retained by us; up to 90 days if access logging is enabled |
cookie_consent cookie |
1 year on your device |
| GA4 user- and event-level data | 14 months; aggregated reports may be kept longer |
GA4 cookies (_ga, _ga_<id>) |
Up to 2 years from your last visit, unless cleared or consent withdrawn |
| Until your enquiry is dealt with, then up to 24 months after our last exchange; longer if it becomes part of an engagement record or law requires |
8. International transfers
Plausible Industries and our S3 origin are in the United States. CloudFront serves pages from the AWS edge location nearest you, so your request may first be handled near you. If you visit from the European Economic Area, United Kingdom or Switzerland, your personal data will be transferred to the United States.
Google LLC and Amazon Web Services, Inc. participate in the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. framework. Where that does not apply, transfers to them rely on Standard Contractual Clauses (with the UK Addendum) in their data processing terms.
9. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data; to restrict or object to processing (including processing based on legitimate interests); to data portability; to withdraw consent; and to complain to a data protection authority (in the UK, the Information Commissioner's Office; in the EEA, the authority in your country).
To exercise a right, email privacy@plausibleindustries.com with the subject "Privacy Request." We may verify your identity, usually by replying to the same address. We respond within one month (GDPR) or 45 days (U.S. state laws), extendable where the law allows, and charge no fee unless a request is manifestly unfounded or excessive.
10. California and other U.S. state privacy rights
This section applies to residents of California and other U.S. states with comprehensive privacy laws; we extend it to all U.S. visitors.
- Categories collected in the last 12 months: identifiers (IP address; name and email if you email us); internet or network activity (pages viewed, referrer, browser and device data); approximate geolocation (GA4, consent only); professional information you include in an email
- Sources: you and your browser. Purposes: Section 4. Disclosed for a business purpose to: the service providers in Section 5. Retention: Section 7
- Sensitive personal information: none collected through the site
- Your rights: to know, access, correct and delete; to opt out of sale or sharing; and to non-discrimination for exercising any right. You may use an authorised agent, whose authority we will verify
Do Not Sell or Share My Personal Information. We do neither. The footer link of that name opens an email to privacy@plausibleindustries.com; we record any request and will apply it if our practices ever change. We honour GPC as a valid opt-out request for your browser. We offer no financial incentives for personal information.
11. Children
venkel.dev is a business website and is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.
12. Security
The site is served only over HTTPS, and access to our AWS account, GA4 property and email is limited to personnel who need it and protected by multi-factor authentication. No system is completely secure.
13. Changes
We may update this Policy when the site or our practices change. We will post the new version here and update the "Last updated" date. For a material change in how we use personal data, we will highlight it on the site before it takes effect and, where required, ask for your consent again.
14. Contact
Plausible Industries LLC Attn: Privacy 2108 N St Ste N Sacramento, CA 95816 United States privacy@plausibleindustries.com
End of Venkel Website Privacy Policy.