Effective 16 September 2026 · Site visitors
This information is published under Article 5 of Directive 2000/31/EC on electronic commerce, as implemented in Greece by Presidential Decree 131/2003.
apodix.org publishes an open technical specification and its reference material. There are no accounts, no registration, no payment, and nothing to purchase. Nothing here is offered as a service.
There is therefore no terms of service document, deliberately. Terms govern a service relationship, and none exists between you and us. What you may do with the material is set by its licences: the specification text under CC BY 4.0, the code, schemas and test vectors under Apache 2.0.
This site sets no cookies and stores nothing on your device. No local storage, no session storage, no device identifiers, no third-party trackers, no advertising, and no consent banner, because there is nothing to consent to.
The verifier on the front page runs entirely inside your browser. The record you edit is never transmitted, never logged and never leaves the page. Closing the tab destroys it.
We collect aggregate, cookieless measurements so that we can tell whether the specification is being read. Specifically: counts of page views, the referring site, the visitor's country, the browser type, and whether the verifier was interacted with.
No cookies are set, no identifier is stored on your device, no profile is built, and nothing follows you across sites. We cannot identify you from this data and we do not try to. Your IP address is processed transiently by our analytics provider to derive a country and is not retained by us.
Lawful basis: our legitimate interest under Article 6(1)(f) GDPR in knowing whether published technical material reaches an audience. You can object at any time using the contact address below.
If you email spec@apodix.org we process your address, your name if you give it, and the content of your message, for the sole purpose of replying and of considering technical comment on the specification.
Mail to that address is routed by Cloudflare, Inc. and delivered to a mailbox operated by Google. Both act as processors. We keep correspondence for as long as it remains relevant to the work and delete it on request.
Lawful basis: our legitimate interest in responding to people who contact us, and steps taken at your request.
Technical comment you send may be acted on in public. If your report changes the specification we will describe the change in the repository, and we will credit you by name only if you ask us to.
Where we hold personal data about you, which in practice means correspondence, you have the right to request access, rectification, erasure, restriction of processing, portability, and to object to processing. Write to spec@apodix.org and we will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. Ours is the Hellenic Data Protection Authority, www.dpa.gr, 1-3 Kifisias Avenue, 115 23 Athens.
If this notice changes, the effective date above changes with it and the previous version remains in the site's repository history. We will not apply a change retrospectively to data already collected under an earlier version.