Privacy

Who handles information

Keep Things Working is operated by Adam Noonan, an individual based in the UK. To ask about personal information, use the contribution form.

If the embedded form does not work, open it directly on Tally.

Last updated: 2026-10-31.

Information you provide

When you contact us or use a contribution form, we receive the information you send. This can include an email address, device and software details, a suggested project link, a description of a result or problem, an offer of help, and any personal credit you ask us to consider.

The contribution form requires only a message. Contribution type, links, device and system details and an email address are optional. An email address lets us reply to you. Send only what is needed to explain the issue. Please leave out passwords, private logs, sensitive personal information and other people's contact details.

We use messages to answer enquiries, check suggestions and corrections, and research and maintain the directory. We rely on legitimate interests: running a useful, accurate directory and responding to people who choose to contact it. We keep access restricted and use only information needed for those purposes.

We also record publicly available project and creator names, links, licence details and relevant published reports from original project websites, repositories and related discussions. We use these to credit work, check evidence and describe solutions accurately, relying on the same legitimate interest in maintaining a useful directory. Each listing identifies its sources.

Messages and public pages

Messages are private correspondence, not public posts. They help us research and write our own pages. We do not publish incoming messages or contact details. If we would like to give a personal credit for a contribution, we agree its wording separately and rely on your consent for that optional credit.

You can withdraw consent for an optional personal credit through the contribution form. This does not affect the lawfulness of earlier use. We will remove the credit from our pages; search engines or other websites may retain copies.

We may use AI tools to help read, organise and summarise messages, research technical questions, and prepare website updates or draft replies. This can involve sharing message contents, names and email addresses with the AI service, when needed for this work. We direct this work and remain responsible for our correspondence and website content.

We limit the information used to what is needed for the task and avoid sharing unrelated messages or sensitive personal information. AI assistance does not make your message a public post.

The Codex assistant is provided by OpenAI OpCo, LLC under its UK individual-service terms. We have switched off the account option allowing new conversations and Codex tasks to be used for model training. OpenAI may still retain and process information to provide and protect its service and meet legal obligations. Its privacy policy explains these uses and the available data controls.

Website and service providers

Cloudflare provides website hosting and network/security services. Delivering and protecting pages involves processing connection information such as IP addresses, requested pages, times and browser details. We rely on legitimate interests in providing a working, secure website. Provider-side processing is not limited to information visible in our dashboard.

Tally BV in Belgium provides the contribution form and stores responses for us using Google Cloud hosting in Belgium. We review messages in Tally's dashboard and receive email notifications in our project mailbox. These notifications include the submitted answers and any email address you provide. They pass through Tally's email delivery service and are stored by Infomaniak Network SA, our email provider. Tally and Cloudflare process relevant information to supply their services and may also have separate account, security and legal purposes explained in their own notices. Tally privacy, Cloudflare privacy.

Infomaniak stores our mailbox in Switzerland. The UK recognises Switzerland as providing adequate data protection. Some earlier email copies remain with our previous provider, Spaceship, Inc. (Spacemail), while we complete the move and review our records. We have asked Spaceship to clarify its applicable UK transfer arrangements and are awaiting its answer. Infomaniak privacy, Spaceship data processing addendum.

The contribution form appears within our website and is provided by Tally. Loading or using it connects your browser to Tally and its service providers. You can also open the form on its own page if the embedded version does not work for you.

OpenAI processes information outside the UK, including in the United States. Its published safeguards include adequacy arrangements or standard contractual clauses with the UK Addendum, as applicable. Its privacy policy explains how to obtain more information about those safeguards.

Our providers may process information outside the UK. The UK recognises the EEA, including Belgium, as providing adequate data protection. European response storage does not mean that every support, network or notification operation stays in Europe. Cloudflare's contractual arrangements include EU standard contractual clauses amended by the ICO UK Addendum where applicable. Use the contribution form to ask for information about applicable safeguards.

Following an external project link takes you to a separately operated website with its own privacy arrangements.

Retention

We review correspondence records monthly and normally delete routine messages and related email copies six months after the discussion closes. We review unresolved cases after twelve months and retain only information still needed. We may keep technical research without information identifying its sender for future directory work.

Where correspondence is included in AI conversations or saved extracts under our control, we include those copies in the same review. OpenAI's deletion and retention rules, including safety and legal exceptions, apply to information held by its service. Archiving a chat is not deletion.

We retain minimal permission records while an agreed personal credit is displayed. Complaint, rights or incident records may be kept longer where needed to resolve the matter or meet an applicable obligation; we record the reason and review date. Provider security records follow the provider's applicable schedules and controls; any diagnostic copies we make are kept only while needed for investigation.

Deletion from active records does not necessarily remove provider recovery copies immediately. Tally describes a backup-deletion period of up to 90 days. Infomaniak and our previous email provider may retain recovery copies after active messages are deleted. These copies are not kept for routine correspondence. We do not promise that a deleted submission can be restored. Expired information must not be returned to routine use when restoring a backup.

Cookies and analytics

We have not enabled visitor analytics or advertising trackers. Tally’s options to save unfinished answers for later and collect partial submissions are switched off. Cloudflare and Tally still process connection and security information as described above.

Your choices and rights

Use the contribution form to ask for access to or correction of your personal information. Depending on the circumstances, you can also request deletion or restriction. Where we rely on consent for a personal credit, you can withdraw it through the same route.

You can object to our use of personal information based on legitimate interests. Use the contribution form and explain your circumstances so we can consider the objection.

We review the form dashboard manually. We respond to rights requests without undue delay and normally within one calendar month. We will explain any applicable extension or exception.

Complaints

If you are unhappy with how personal information has been handled, complain through the contribution form. We will acknowledge the complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome.

You can also complain to the Information Commissioner's Office, the UK's data protection regulator.