Privacy

This page explains what URSY.NET records when you, or software you run, use this site: what, why, and for how long. It covers the web pages and the API at /wp-json/ursy-net/v1. It applies from 18 September 2026.

Who we are

URSY.NET is run by URSY, 72 Frant Road, Tunbridge Wells, Kent, TN2 5LR, United Kingdom. Email hello@ursy.com about anything on this page.

The short version

• There are no accounts on this site. Sign-in for URSY services happens on ursy.id, not here.
• We do not sell data and we do not build profiles of visitors.
• The site sets one cookie, and only when you answer the cookie question.
• Page views are counted only if you say yes, and only as numbers.
• Security records use a scrambled (hashed) value instead of your IP address.

Cookies and browser storage

ursy_consent remembers your answer to the cookie question: “yes” or “no”. This site sets it only when you choose. It lasts 365 days, is first-party, uses SameSite=Lax and is sent only over HTTPS. If you delete it, the question comes back.

ursyAppearance.v1 is kept in your browser’s local storage only if you change how a URSY page looks, so the next page looks the same. It stays in your browser and is never sent to us.

There are no advertising, analytics or social-media cookies on this site, and the server itself sets no cookies.

Counting page views

If you say yes, your browser tells this site once per page that the page was viewed. We add one to a daily total for that part of the site. No cookie value, IP address or other identifier is stored with it. If you say no, or never answer, nothing is sent.

Crawlers and AI agents that name themselves (for example a search engine’s crawler) are counted by type as daily totals, worked out from the name they send. No IP address is stored with those totals.

Security records

To protect the site from attacks, some requests are written to a private security log: the time, the rule that was triggered, the method (such as GET or POST), the page path and a one-way hashed value made from your network address with a secret key. That lets us spot repeated attacks without keeping the address itself. Query strings and anything you send in a request are not stored. These records are kept for up to 30 days.

To keep the site fair for everyone, requests are also counted against a hashed network address for a short time, at most about an hour, and then forgotten.

Machine requests

When a crawler or AI agent that names itself (not a web browser) reads one of this site’s machine files, such as llms.txt or the catalogue, we keep a short record for 7 days: the agent’s product name, a shortened network block (the first three parts of an IPv4 address, or the first 48 bits of an IPv6 address) and which file it read. These records describe crawler operators’ networks, not people. They are made available to teas.co.uk, the site’s sponsor, so it can match them with its own records.

Quotes

If an agent asks for a quote, we store the quote itself: which offer, how many, the price, when it was issued and when it expires. No name, email address or IP address is stored with it. A quote that is never ordered is deleted about a day after it expires.

Questions to the help box

The help box on each page answers questions from this site’s published information. On URSY.NET the text of a question is not kept after it has been answered.

Adverts

The advert panels on this site are for teas.co.uk, the site’s sponsor. They come from URSY’s own advert service, not an advertising network: no third-party script runs and no profile is built. The pictures load from ursy.ad, a URSY site, as ordinary image requests.

If you have said no to cookies, or not answered, an advert link goes straight to teas.co.uk. If you have said yes, the link first passes through a teas.co.uk address that records the arrival (which advert and which page it came from, not who you are). From then on, teas.co.uk’s own privacy policy applies.

Hosting and network

The site is hosted by 20i and runs behind Cloudflare, which protects it from attacks and delivers pages quickly. Both keep standard technical logs, such as IP addresses and request times, under their own privacy policies. Cloudflare may handle requests outside the United Kingdom under its own safeguards.

Fonts are served from URSY’s own servers. No request goes to Google or any other font service.

Email

If you email us, we keep your message and our reply for as long as we need them to deal with it.

Why we are allowed to do this

• Counting page views: your consent. You can change your answer at any time by deleting the ursy_consent cookie.
• Remembering your cookie answer: it is needed to respect the choice you made.
• Security records, fair-use limits, machine-request records and quotes: our legitimate interest in running a safe, working site and in honouring the quotes it issues.
• Answering questions and emails: our legitimate interest in replying to you.

Your rights

Under UK data protection law you can ask what we hold about you, ask us to correct or delete it, ask us to stop using it, and object to how we use it. Because ordinary visits are not stored with a name, email or IP address, most records cannot be linked to you. If you write to us, we will tell you plainly what, if anything, we can find.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put it right first, so please contact us too.

Changes

If this page changes, the “Last updated” date at the top changes, and any change that affects what we record is described on this page.