Privacy policy
Last updated 13 September 2026 · Applies to wysiwyg.phookit.co.uk
Who we are
phookit ("we", "us") operates wysiwyg.phookit.co.uk. We are the data controller for personal data collected through this website. Contact us about privacy at hello@phookit.co.uk.
What we collect and why
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Server logs (IP address, browser, pages requested, timestamps) | Security, abuse prevention, fixing faults | Legitimate interests | 30 days |
| Account details (username, email address, hashed password, profile settings) | Providing your account, email verification, password reset, notifications you opt into | Contract (providing the service you registered for) | Until you delete your account, then up to 30 days in backups |
| Content you post (comments, reactions, gallery images and descriptions) | Publishing it on the site as you requested | Contract; legitimate interests (moderation) | Until you delete it or your account |
| Login attempts | Rate-limiting and CAPTCHA after 3 failed attempts | Legitimate interests (security) | 24 hours |
| Messages you send us (contact forms, email) | Replying to you | Consent; legitimate interests | 12 months |
Cookies
We only set non-essential cookies with your consent. Details of every cookie, and how to change your choice, are in the cookie policy.
Who we share data with
- Hosting and infrastructure providers that run our servers, including Cloudflare, which proxies traffic to protect and speed up the site and therefore processes your IP address.
- CAPTCHA providers (Cloudflare Turnstile, hCaptcha or Google reCAPTCHA) when you register, post as a guest, or after repeated failed logins. They process your IP address and browser signals to tell humans from bots.
- Authorities where the law requires it.
We never sell personal data.
International transfers
Where a provider processes data outside the UK or European Economic Area we rely on adequacy regulations or the International Data Transfer Agreement / EU Standard Contractual Clauses.
Your rights
Under the UK GDPR and Data Protection Act 2018 (and the EU GDPR if you are in the EEA) you can ask us to: access the personal data we hold about you; correct it; erase it; restrict or object to processing; receive it in a portable format; and withdraw consent at any time. Email hello@phookit.co.uk and we will respond within one month. You can also complain to the ICO at ico.org.uk (or your local supervisory authority).
Children
This website is not directed at children under 13. You must be at least 13 to create an account. If you believe a child has given us personal data, contact us and we will delete it.
Security
All traffic is encrypted with TLS. Passwords are stored hashed. Access to servers is restricted and logged. No system is perfectly secure; tell us at once if you suspect a problem.
Changes
We will post any changes to this policy here and update the date at the top. Significant changes will be announced on the site.