Privacy notice
ephesus.net is a reference site, not a service. It sets no cookies and runs no analytics. The only personal data it handles is what you type into one of its two forms, and this page says what happens to that.
What the site does not do
Reading ephesus.net leaves no trace on your device beyond what any web page needs to display. There are no cookies, no analytics scripts, no advertising, and no maps, videos or fonts loaded from other companies’ servers. The web server keeps the ordinary short-lived access logs every server keeps, which are used only to run and secure the site.
The two enquiry forms keep one value in your browser’s session storage while a form is open, so that the form can return you to the page you came from. It is not a cookie, it is never sent anywhere, and it is gone when the tab closes.
The two forms
The correction form on About this site and its method collects your name, your email address, the page and passage you are reporting, and your message. We use it to check the report against the sources and to reply to you. The email address is required so that a reply is possible.
The partner enquiry form on Ephesus tours collects your name, your email address, the name and kind of your business, and your message. We use it to reply to you about listing or working together.
With each message the system also records the sending computer’s IP address and browser identification string, which are used only to recognise and block abuse of the forms, and a hashed form of the IP address for a short-lived rate limit.
Why we may use it
For a partner enquiry, the basis is that you asked us to take steps towards an arrangement with you (GDPR Article 6(1)(b)). For a correction, and for the abuse-prevention records, the basis is our legitimate interest in running an accurate, working site and answering the people who write to it (Article 6(1)(f)). We do not ask for consent, because nothing here depends on it, and we do not use anything you send for marketing.
Where it goes and how long it stays
A message is delivered by email to the publisher’s mailbox, which is hosted by Proton in Switzerland, and a copy is kept on the site’s web host in the United Kingdom. Both countries hold an adequacy decision from the European Commission, so no additional transfer safeguard is needed. Nothing is stored in Turkey.
Every message, with its IP address and browser string, is deleted after twelve months by a scheduled purge on the host, unless it has led to an ongoing arrangement, in which case ordinary business records apply. The rate-limit records are discarded within a day.
Your rights
You can ask what we hold about you, ask for it to be corrected or deleted, ask us to restrict how we use it, or object to our using it, at any time and free of charge, through the correction form. If you think we have handled your data wrongly, you can complain to the supervisory authority where you live; in the United Kingdom that is the Information Commissioner’s Office, and in the European Union it is your national data protection authority.
Changes
This page describes the site as built on 18 September 2026. If what the site collects changes, this page changes with it, and the date here moves.