Privacy

What this site does and does not do

• Analytics, only if you accept. Google Analytics counts page views. The tag is not loaded and Google receives nothing at all unless you have said yes — see cookies for the register and the control to change your mind.
• No advertising. No ad network, no ad script, no advertising identifier, no affiliate link.
• No personalisation. Every reader sees the same pages in the same order. Nothing about you changes what the site shows you, so there is nothing to profile you for.
• No other third-party script, font or embed. Apart from the analytics you have accepted, every asset comes from this domain. Page views go to Google Analytics and to the operator’s own HEKNO Analytics; the second sets no cookie and stores nothing on your device. Both are listed below and neither runs before you accept.
• No account, no sign-in, no form. The public site collects nothing from you because it asks you for nothing.

What is processed, and by whom

The only personal information involved in reading this site is what any web server necessarily handles in order to answer a request. We do not collect it for our own purposes, do not build profiles from it, and do not combine it with anything else.

• Vercel Inc. — Hosting and content delivery. Request logs, which can include IP address, page requested, time and user-agent. Their privacy documentation.
• Cloudflare, Inc. — Authoritative DNS for the domain. DNS queries resolving the hostname; no page content passes through it. Their privacy documentation.
• Google LLC (Google Analytics 4) — Analytics, property G-RJ07PVDPHL. Page views and session identifiers, only after the reader accepts. Nothing is loaded or sent before consent. Their privacy documentation.
• HEKNO Ltd (HEKNO Analytics) — Analytics. Page views, only after the reader accepts. No cookie and no device storage — the session identifier is held in memory for the tab and never written down. No query string, no referrer and no page content is sent. The service that receives them is hosted by Railway. Their privacy documentation.

Lawful basis. Serving the page you asked for, and keeping the service secure and available, rest on legitimate interests. Analytics rests on your consent, which is why you are asked for it and why refusing changes nothing about what you can read.

Retention: operational logs are held by the hosting supplier under their own retention schedule, and analytics data by Google under theirs. We keep no separate copy and maintain no database of readers.

Withdrawing consent is one click on the cookie page, at any time, with no consequence.

The search box

Search runs on the server and the query is part of the URL, so it appears in the hosting logs exactly as any page address does. It is not recorded anywhere else, not associated with you, and not used to change what anybody sees. Results are the same for every reader.

Our own editing area

Material World has a private editing area, used by us to check facts before they appear here. It is switched off on the public site and cannot be reached from it. It is the one part of the site that uses a cookie — a session cookie for whoever is signed in — and no reader of these pages is ever given one.

If this changes

Analytics was added at public launch, and this page and the cookie register were rewritten in the same change that added the tag — not afterwards. A notice updated after the fact has already been wrong to everybody who read it in between, which is why the ordering is the rule rather than the intention.

If advertising is ever added the same ordering applies, and it would be disclosed prominently rather than buried here.

Controller

HEKNO Ltd, company SC895711, registered office Borthwick Farm Cottage, Gorebridge, EH23 4QZ, United Kingdom, is the controller unless a service states otherwise. Privacy contact: privacy@hekno.co.uk.

Rights

Depending on the circumstances, people may have rights to information, access, correction, deletion, restriction, objection, portability, consent withdrawal and safeguards relating to solely automated decisions. Rights are not absolute and exemptions may apply.

Requests and complaints

Send requests or data-protection complaints to privacy@hekno.co.uk. HEKNO may make proportionate identity checks, will acknowledge a data-protection complaint within 30 days and will respond without undue delay. People may also complain to the Information Commissioner’s Office.

Children, automated decisions and security

HEKNO services are not intentionally directed at children. Most HEKNO tools provide informational outputs rather than legal or similarly significant decisions; any significant solely automated decision is reviewed on its own terms before it is ever used. HEKNO uses proportionate technical and organisational measures, but no online system can be guaranteed completely secure.