What happens to your message.

Mihira is a professional brand. The person behind it is an independent software engineer based in Barcelona, Spain. I am keeping my legal identity off this site. It is given to clients in contracts, and to anyone exercising their data rights or to a supervisory authority on request, by email to hello@mihira.me.

From the form: your name, your email address, and your message. That is the whole of it. There is one hidden field, and it is a spam trap that has to stay empty - it records nothing about you.

From the request itself: the web server writes an ordinary access log entry - the time, your IP address, the path requested, the response status and size, how long it took, the page you came from, and the identifying string your browser sends. Your message is never written to a log. Neither is your email address: the form service logs only the domain part of it, because the address itself is already in my mailbox and does not need to be in a log as well.

To stop spam: the form service holds your IP address in memory for up to two hours, to cap how many submissions one address can send in an hour. It is never written to disk and it is gone when the service restarts.

The purpose is to read your enquiry and reply to it, and to keep the form usable rather than buried in spam. There is no other purpose.

Taking steps at your request before a contract - GDPR Article 6(1)(b). Where you are not asking about services, my legitimate interest in answering enquiries sent to me - Article 6(1)(f).

mailbox.org, an email provider in Germany, carries your message over an encrypted connection and holds the mailbox it lands in. Hetzner hosts the server this site and the form run on. Both act as processors, on my instructions and for no purpose of their own.

Nobody else. No advertising, no analytics, no data sold or passed on. The pages load nothing from a third party - no external fonts, scripts, images or embeds - and the only connection the form service makes to the outside world is the one that delivers your message to my mailbox.

Your message: 12 months after the last message in the thread, then deleted.

Server logs: not kept as a record. They exist to investigate a fault or an abusive burst of traffic, they are capped in size and rotate out of existence as new entries arrive, and nothing links an entry to the contents of a message.

The anti-spam entry: at most two hours, in memory only.

If we start working together, the records the law requires me to keep for contracts and invoicing are kept for as long as it requires, and no longer.

You can ask for access to your data, for it to be corrected or erased, for its use to be restricted, for a copy of it to take elsewhere, and you can object to my using it at all. Email hello@mihira.me and say what you want; you do not need to use any particular wording.

If you are not satisfied with how I handle that, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in your own country.

Nothing here makes an automated decision about you, and there is no profiling. The one automated step is the spam trap: a submission that fills in the hidden field is discarded and never reaches me. Everything else, I read myself.

None. No trackers, no analytics, no cookies - the line in the footer of every page is literal. One small script on the contact page improves the error messages when a submission fails; it is served from this domain, it stores nothing, and the form works with it switched off.

If what the form does changes, this page changes with it, and the date below changes too.

Last updated 4 October 2026.