Privacy

Last updated: 23 September 2026

Who we are

This site, hollowscript.org, is the home of the HollowScript programming language. It is operated by Soulstack, the data controller for personal data processed through it. Address for data-protection queries and legal correspondence: Office One, 1 Coldbath Square, Farringdon, London, EC1R 5HL, England. Email: privacy@hollowscript.org.

What this site collects

Reading the site collects nothing about you beyond what any web server sees to deliver a page: your IP address, browser and device details, and the pages requested, kept in the hosting provider’s request logs.

The support form, when it is open, collects what you type into it: your name, your email address, a category and your message. To keep the form free of spam it also runs two checks in your browser:

• Soulstack Verify, Soulstack’s own anti-spam service, sets your browser a small computing puzzle and records your IP address for a few minutes so that it can limit how often one address submits.
• Google reCAPTCHA v3, through Firebase App Check, reads technical signals from your browser and device to judge whether a request comes from a person. It loads only once you start filling in the form, so opening the support page alone sends nothing to Google.

If you email us instead, we receive your email address and whatever you write.

How we use it

Purpose	Lawful basis (UK GDPR Art. 6)
Delivering the site and keeping it secure	Legitimate interest
Answering a support message or email	Legitimate interest
Preventing spam and abuse of the support form	Legitimate interest

We do not use your details for marketing, and we do not add you to any mailing list.

Who processes it and where

• Google (Firebase Hosting and Google Cloud) serves the site and runs the services behind the support form. Google acts as a data processor.
• Google reCAPTCHA runs the App Check part of the spam check. Google receives the signals it collects under the Google Privacy Policy and Terms of Service.
• Soulstack Verify is Soulstack’s own service, not a third party. It runs on Google Cloud in the United States. It keeps your IP address for between one and ten minutes for rate limiting, and each puzzle and pass token for at most ten minutes; these records are stored in Google Cloud Firestore in the European Union and expire automatically. Its logs record a hash of your IP address rather than the address itself.

A support message is received by a service in London and stored in Soulstack’s own task system, which uses Google Cloud Firestore in the United States, so that the people who maintain HollowScript can answer it. With the message, it keeps a hash of your IP address and of your browser’s user agent, rather than the values themselves, to spot repeated abuse. We do not sell personal data, and this site runs no advertising or analytics. Apart from the reCAPTCHA check on the support form, it runs no third-party scripts.

International transfers

The site is operated from the United Kingdom. Support messages are stored in the United States, Soulstack Verify runs there, and Google may process other data outside the UK and European Economic Area. Where that happens, we rely on the transfer safeguards available under UK GDPR, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

A support message and the email address that came with it are kept for as long as needed to deal with it, and deleted within 12 months of the conversation ending. Soulstack Verify’s records expire within ten minutes, as above. Hosting request logs are kept only as long as the hosting provider needs them for delivery and security.

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or object to our processing of your personal data, and to receive a copy of it. To exercise any of these rights, email privacy@hollowscript.org. We will respond within one calendar month.

Cookies and browser storage

This site sets no cookies of its own. Its search runs entirely in your browser from an index downloaded with the site, so what you search for is never sent anywhere. It remembers your light or dark theme choice in your browser’s local storage, which never leaves your device. Once you start filling in the support form, Google reCAPTCHA sets a cookie named _GRECAPTCHA for its risk analysis, which Google describes as necessary for that purpose. It is not used for advertising.

Changes to this page

We will update this page before any change in what the site collects. The date at the top reflects the latest revision.

Complaints

If you have a complaint about how we handle your data, email privacy@hollowscript.org first. If you remain dissatisfied, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113.