Legal
Privacy Policy
Last updated: 27 March 2026
1. Who we are
Wisdom Booth (“we”, “us”, “our”) is a spiritual quotations service accessible at wisdom-booth.cchk.me. The service is operated by Ganda Tech Services (ABN 32 164 690 751), a company registered in Australia. For privacy enquiries contact us at [email protected].
2. What personal data we collect
We do not collect any personal data directly. Wisdom Booth has no user accounts, no registration, no contact forms, and does not place analytics or marketing cookies.
However, as with any website, your internet browser sends technical data to our infrastructure when you visit:
- IP address (used for routing and security; not stored by us)
- Browser type and version
- Pages viewed and timestamps
- Referrer URL
This data is processed by our infrastructure providers (see section 4) solely for security and service delivery purposes, and is not combined with any personal profile.
3. Cookies
Wisdom Booth itself does not set any cookies. Our CDN and security provider Cloudflare may set the following strictly-necessary cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| __cf_bm | Cloudflare bot management — distinguishes humans from automated traffic | 30 minutes |
| cf_clearance | Cloudflare challenge — records that a security challenge was passed | 30 minutes – 24 hours |
These cookies are strictly necessary to deliver the service securely. No consent is required for strictly-necessary cookies.
4. Third-party data processors
We use the following service providers who may process technical log data on our behalf:
| Provider | Role | Location |
|---|---|---|
| Cloudflare, Inc. | CDN, DDoS protection, bot management | US (EU–US DPF certified) |
| Hetzner Online GmbH | Hosting and server infrastructure | Germany (EU) |
Where these providers are located outside Australia, we rely on their participation in internationally recognised privacy frameworks (such as the EU–US Data Privacy Framework) or contractual protections consistent with the Australian Privacy Principles.
5. Legal framework
5.1 Australia — Privacy Act 1988
Ganda Tech Services complies with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). As we do not collect personal information directly, the primary obligations under the APPs (APP 3 – Collection, APP 5 – Notification) are satisfied by this policy. We are subject to the Notifiable Data Breaches (NDB) scheme; in the unlikely event of an eligible data breach involving our infrastructure providers we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required.
5.2 European visitors — GDPR
For visitors in the European Economic Area, the United Kingdom, or Switzerland, the processing of technical log data by our infrastructure providers is based on our legitimate interest(GDPR Art. 6(1)(f)) in maintaining the security and availability of the service. No processing requires your consent. Our server infrastructure is hosted within the EU (Hetzner, Germany), which satisfies GDPR data residency considerations for EU visitors.
6. Data retention
Server access logs processed by Cloudflare are retained for up to 30 days for security monitoring. Hetzner retains infrastructure logs for up to 7 days. We do not retain any personal information beyond what our service providers hold in the ordinary course of service delivery.
7. Your rights
Under the Australian Privacy Principles you have the right to request access to, or correction of, personal information we hold about you. Under GDPR you additionally have rights of erasure, portability, and objection to processing. Since we do not directly hold personal information, most requests should be directed to our service providers:
You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority. For enquiries contact [email protected].
8. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the service after any update constitutes acceptance of the revised policy.