Legal information

Privacy Policy

Last updated: 3 September 2026

Summary: mhl42.ai is a static site. It sets no cookies unless you accept analytics in the cookie banner, in which case Microsoft Clarity records how the site is used (see section 07). Beyond that, the only personal data we process is what you choose to send us — through the contact form on the homepage or by emailing info@mhl42.ai. The form is delivered to us via Resend, our email service provider. If you decline analytics and don't contact us, we don't collect anything about you.

01Data controller

In accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD), the data controller is identified as follows:

Controller: Beyer Ventures, S.L. ("Mostly Harmless")
Tax ID (NIF): B16767576
Address: C/ Ausias March 47-6, 46120 Alboraya (Valencia), Spain
Contact: info@mhl42.ai

02Data we process

This website installs cookies and uses a web analytics tool only with your consent (see section 07). Apart from that, the only personal data we process is what you provide voluntarily through one of two channels:

The contact form on the homepage. Submitting it sends us your name, email address, and message contents.
Direct email to info@mhl42.ai, including any information you choose to include.

The contact form includes basic technical safeguards (a hidden honeypot field and request validation) to filter automated spam. No identifying information is logged from these checks.

03Purpose and legal basis

Data you send us by email or through the contact form is processed in order to:

Respond to your enquiry or request, and maintain the resulting correspondence.
Where applicable, manage a potential professional or commercial relationship.

Legal basis: your consent, expressed by sending us your message (Art. 6(1)(a) GDPR), and/or the performance of pre-contractual or contractual measures at your request (Art. 6(1)(b) GDPR).

Analytics data (section 07) is processed in order to understand how the site is used and to improve it. Legal basis: your consent, given through the cookie banner (Art. 6(1)(a) GDPR and Art. 22.2 of the Spanish Information Society Services Act, LSSI). You can withdraw it at any time.

04Retention period

We retain your data for as long as needed to handle your request and, where applicable, for the duration of any resulting professional relationship. After that, data is kept blocked for the periods legally required (in particular, those relating to tax and accounting obligations) and is deleted at the end of those periods.

05Recipients and transfers

We do not share your data with third parties, except where legally required or where strictly necessary to deliver this service. The following data processors are used:

Resend (Resend, Inc.) — transactional email provider for the contact form. Resend processes the message contents in order to deliver them to our inbox. We use Resend's EU region (Frankfurt, Germany) for data residency. Their privacy policy is available at resend.com/legal/privacy-policy.
Cloudflare, Inc. — hosts the website and the serverless function that processes form submissions. Cloudflare may process technical data (IP address, request headers) as part of standard web infrastructure and DDoS protection. Their privacy policy is available at cloudflare.com/privacypolicy.
Microsoft Corporation (Microsoft Clarity) — web analytics, only if you accept it in the cookie banner. Microsoft processes the usage data described in section 07 on our behalf. Microsoft's privacy statement is available at privacy.microsoft.com/privacystatement and the Clarity terms at clarity.microsoft.com/terms.

These providers comply with the GDPR. Where international transfers occur, they provide the appropriate safeguards under Articles 44 and following of the GDPR (in particular, the EU Standard Contractual Clauses).

06Your rights

You have the following rights regarding your personal data, which you may exercise at any time by writing to info@mhl42.ai:

Access: obtain confirmation of whether we are processing your data and, if so, a copy of it.
Rectification: have inaccurate or incomplete data corrected.
Erasure: have your data deleted when it is no longer needed.
Object: object to processing in certain circumstances.
Restriction: request restriction of processing in certain circumstances.
Portability: receive your data in a structured, commonly used format.
Withdraw consent: revoke any consent given, at any time, without affecting the lawfulness of processing carried out beforehand.

If you believe the processing does not comply with applicable law, you may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

07Cookies and analytics

When you first visit, a banner asks whether you accept analytics. Nothing analytics-related is loaded, and no cookies are set, until you accept. Declining has no effect on the site. Your choice is stored in your browser's local storage (key mhl42-consent, not a cookie) so that we do not ask again; clearing site data removes it. If your browser sends the Global Privacy Control signal, we treat that as a refusal and do not show the banner.

If you accept, we load Microsoft Clarity, a session-analytics service. Clarity records page views, clicks, scrolling, and mouse movement, and can replay a session as an anonymised recording. Text you type into the contact form is masked by Clarity before it is sent. Clarity also collects technical data such as the pages visited, referrer, browser and device type, screen size, approximate location derived from the IP address, and a random identifier that recognises your browser on later visits. We have configured Clarity with advertising storage denied; the data is not used for advertising by us.

Cookies set by Clarity when accepted:

_clck (first party, up to 1 year): Clarity user identifier and preferences.
_clsk (first party, 1 day): links page views into one session.
CLID (clarity.ms, up to 1 year): identifies the first time Clarity saw this browser.
ANONCHK, MR, MUID, SM (Microsoft domains, up to 1 year): Microsoft identifiers used for bot detection, load balancing and to synchronise the identifier across Microsoft domains.

Microsoft processes this data as our processor. Data may be transferred to and stored in the United States; Microsoft provides the safeguards required by Articles 44 and following of the GDPR (EU Standard Contractual Clauses and the EU-US Data Privacy Framework). Session recordings and heatmaps are retained by Clarity for a limited period set by Microsoft (currently up to 30 days for recordings and up to 13 months for aggregated data).

Changing your mind: use the "Cookie settings" link in the footer of any page to see the banner again and change your choice. Withdrawing consent stops further collection; it does not delete data already collected, which you can ask us to erase (section 06). You can also delete the cookies listed above in your browser.

This site does not use any other cookies, pixels or fingerprinting.

08Security

We apply reasonable technical and organisational measures, in line with the state of the art, to protect personal data against unauthorised access, alteration, loss, or disclosure.

09Changes

This policy may be updated to reflect legal or service changes. The current version will always be the one published at this URL, with the date shown at the top.