Skip to content
Put it up, home
Menu

Privacy

Put it up sets no cookies and runs no analytics or tracking. This page sets out what the site stores, what it sends and what your rights are.

Updated

Run by
One person who likes putting things up, and likes it better when they stay up
Host
Spaceship, on servers in the United States
Access logs kept for
As long as Spaceship's own policy keeps them. We do not download them or keep copies.
Lawful basis for the access logs
Legitimate interests: keeping the site working and secure.
Email provider
Spaceship receives mail sent to hello@putitup.co.uk and forwards it to a Gmail inbox, run by Google.
Emails kept for
Up to 12 months after our last reply to you, then we delete them.
Lawful basis for keeping emails
Legitimate interests: answering your message and correcting the page you wrote about.

Does Put it up use cookies?

No. Put it up sets no cookies, and it runs no analytics, advertising or tracking code. Every font, script, drawing and icon comes from this site itself, so reading a page makes no request to any other website.

The cookie rules cover more than cookies. The ICO says Although this guide focuses on cookies, regulation 6 actually applies to anyone who stores information on a user’s device or gains access to information on a user’s device, in either case by any method. So the next section sets out the one thing this site can store on your device, and when.

Source: Information Commissioner's Office (ICO), Guide to PECR: cookies and similar technologies. Checked .

What does Put it up store on my device?

Put it up stores only your choice of light or dark theme, and only if you make one. When you press the theme button in the header, your browser keeps the word light or dark in this site's local storage, under the name theme, so the next page opens in the same theme.

Nothing is stored before you press it, and nothing else is ever stored. Until you press it, pages follow your device's own light or dark setting. To remove your choice, press Match my device at the foot of any page, or clear this site's data in your browser. If your browser blocks storage, your choice lasts only for the page you are on.

What happens to the answers I give the tools?

Your answers stay in your browser. Both tools work out the answer on the page itself, from a file of makers' figures that the page loads from this site the first time you use the form. That request asks only for the file, never for anything you entered, and nothing you enter is sent to us.

When you get an answer, the tool writes your answers at the end of the page address, after the # sign, so that you can bookmark or share the result. That part of the address carries only the answers that apply:

  • Will it hold?: what you are putting up, its weight and whether you gave it in kg or g, the wall surface, whether it is going in a bathroom and, for a mirror, the size and thickness if you gave them.
  • What's my wall?: what you are putting up, if the link you followed carried it, the wall, what is behind the tiles, the plasterboard thickness, the tile thickness, the weight and its unit, the number of fixings and which way the load pulls.

That part of the address never reaches our server. The web address standard, RFC 3986, says the fragment identifier is separated from the rest of the URI prior to a dereference, and thus the identifying information within the fragment itself is dereferenced solely by the user agent, regardless of the URI scheme. The user agent is your browser.

A guide on this site may open Will it hold? with the thing already chosen, which shows in the address as, for example, ?item=mirror. That part does reach the server, but it is one of our own options, never something you typed.

The Copy link button copies the whole address, answers included. If you share or bookmark a result link, your answers go wherever you put it.

Source: IETF, via the RFC Editor, RFC 3986, Uniform Resource Identifier (URI): Generic Syntax. Checked .

What reaches the server when I visit?

Your browser's request for each page and file reaches the web server that hosts Put it up, as with any website. This site's server settings are written for Apache-compatible servers, and Apache's documentation says The server access log records all requests processed by the server. In the standard formats it describes, an entry can hold:

  • your IP address: This is the IP address of the client (remote host) which made the request to the server.
  • the time: The time that the request was received.
  • the page or file asked for, without the part after the # sign;
  • the page you came from, if your browser reports one: This gives the site that the client reports having been referred from.
  • your browser's description of itself: This is the identifying information that the client browser reports about itself.

We use this log only to keep the site running and secure and to count requests in total, such as how many times a page was asked for. We do not use it to find out who you are.

The company that hosts the site, how long it keeps this log and the lawful basis for keeping it are listed at the top of this page.

Source: Apache Software Foundation, Apache HTTP Server 2.4 documentation: Log Files. Checked .

What do other sites learn when I follow a link?

When you follow a link, your browser tells the other site only that you came from Put it up, not which page you were reading. The site asks your browser to tell other sites only its own address, under the policy the W3C calls strict-origin-when-cross-origin. Its own example: If a document at https://example.com/page.html sets a policy of "strict-origin-when-cross-origin", then navigations to https://example.com/not-page.html would send a Referer header with a value of https://example.com/page.html. Navigations from that same page to https://not.example.com/ would send a Referer header with a value of https://example.com/.

Your answers after the # sign are never passed on either. The HTTP standard, RFC 9110, says A user agent MUST NOT include the fragment and userinfo components of the URI reference [URI], if any, when generating the Referer field value. The fragment is the part after the # sign, and the Referer field is how a browser tells a site where you came from.

This applies to links to makers' pages, to the other sources we cite and to links marked Ad. The other site still receives what any visit sends, as our own server does: your IP address, your browser's description of itself and the address the link opens, such as the product a link marked Ad searches for.

Sources: W3C, Referrer Policy (W3C Candidate Recommendation). Checked ; IETF, via the RFC Editor, RFC 9110, HTTP Semantics. Checked .

What happens when I follow a link marked Ad?

Links marked Ad take you to amazon.co.uk. Once you are there, Amazon's own privacy and cookie notices apply.

No image, price or script from Amazon loads on Put it up, and the link never carries your answers.

What happens if I email you?

We receive your email address, your message and anything you attach. We use them only to reply and, if you report a mistake, to correct the page. We never add you to a mailing list: Put it up has none.

The email provider, how long emails are kept and the lawful basis for keeping them are listed at the top of this page.

What are my rights over my data?

You have rights over personal data we hold about you, such as an email you sent us. The Information Commissioner's Office (ICO) lists them in its guide, including these:

  • Individuals have the right to access and receive a copy of their personal data, and other supplementary information.
  • The UK GDPR includes a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete.
  • The UK GDPR introduces a right for individuals to have personal data erased.
  • The UK GDPR gives individuals the right to object to the processing of their personal data in certain circumstances.

To use any of them, email us at the address on the contact page.

Source: Information Commissioner's Office (ICO), A guide to individual rights. Checked .

How do I complain about how my data is used?

Tell us first, by email. The ICO says In most cases, we recommend that you raise your concern with the organisation first and give them a chance to put things right. It adds: If you’re unhappy with the organisation’s response, you can then complain to the ICO.

Source: Information Commissioner's Office (ICO), Make a complaint about how an organisation has used your personal information. Checked .

Who is responsible for my data?

The person described under Run by at the top of this page, and at the foot of every page, is responsible for this site and for any personal data it keeps. You can reach them at the address on the contact page.

When does this privacy page change?

This page changes whenever the site changes what it stores or sends. Nothing new, such as analytics or a picture or price loaded from another site, is added without this page changing at the same time. The date at the top shows the last change.