What this site records, and why.
Short version: browse freely and we keep almost nothing. Send us a message and we keep a detailed record of the machine it came from, because people who write to us have threatened to kill our staff and those records are what the police ask for.
Last updated August 2026
Reading the site
We set one cookie that gives your browser a random identifier, plus the date you first arrived and a count of pages you have opened. Until you accept in the banner, that identifier lasts only until you close the browser. Accept and it lasts two years. There is no analytics service, no advertising network and no third-party script anywhere on this site.
Sending the contact form
When you press send we store your message together with your IP address and the whole forwarding chain, the network operator, ASN and registered location of that address, every request header your browser sent, every cookie it sent us, and the identifier described above. From the browser itself we store screen and window size, platform and version, processor cores, memory, graphics adapter, time zone, language list, plugin list, connection type, a rendering fingerprint, and how long you spent on the page before sending. This is stated on the form, above the send button, before you send anything.
Why we go that far
Our staff receive death threats. When one arrives, the difference between a police report that goes somewhere and one that does not is whether the technical detail was captured at the moment the message was sent. Gathering it afterwards is impossible. The legal basis is our legitimate interest in the safety of our staff under article 6(1)(f) GDPR, and in criminal matters the further handling of that evidence.
VPNs and proxies
The form refuses messages from VPNs, public proxies, Tor and datacentre ranges, and tells you so. Attempts that are refused are still recorded, including the reason. If you need to reach us without revealing your connection, write to the office by post.
Automated submissions
The form carries hidden fields and a timing token that only a script would trip. Submissions that trip them are stored and never delivered, and the sender is shown the ordinary confirmation.
Who sees it
Office staff and the casework team. It is not sold, shared for marketing or given to anyone outside the organisation, except to the police or a court in connection with a criminal matter, or where the law requires it. IP addresses are checked against proxycheck.io, which receives the address and nothing else.
Your rights
You may ask what we hold about you, ask for it to be corrected, ask for it to be deleted, and object to our keeping it. Write to the address below. We will refuse deletion where the record is evidence in a criminal matter, and we will tell you plainly if that is the reason. You may complain to the Autoriteit Persoonsgegevens in the Netherlands or to your own national supervisory authority.
Who is responsible
Stichting Pangaea Continental
Postal address to be added Nijmegen, the Netherlands
KvK number to be added
How long we keep it
Messages that lead nowhere are deleted after twelve months. Anything connected to a threat, a criminal file or court proceedings is kept until that matter is closed and the appeal period has run out. Confirm both periods with your lawyer and set them in writing before launch.