Recent changes
Wednesday November 04 2026
-
Controller, processor and the software Updated Markdown page
For public bodies sorting out data protection roles around a site - Exponential is software, not a data controller; who is usually controller and processor (your body, hosting company, implementation partner…
-
Cookie banners and consent Updated Markdown page
For public bodies deciding whether their site needs a cookie consent banner - Exponential ships no banner or consent manager, the kernel needs none for its functional cookies, and what to do when you add analytics…
-
Cookies set by Exponential Updated Markdown page
For public bodies writing their cookie notice - the cookies Exponential's kernel and administration designs set (session, is_logged_in, setup wizard, mobile detection, administration UI state), their purpose and when…
-
Data minimization Updated Markdown page
For public bodies applying data minimization and privacy by default - what Exponential minimizes already (audit, request logs, log viewer, mail), and what you minimize yourself in content classes, forms, logs, search…
-
Data protection impact assessment for a website Updated Markdown page
For public bodies deciding whether and how to assess the privacy risks of a site built with Exponential - when a DPIA is commonly considered, the facts the product supplies for the description and the risk analysis, and…
-
Mapping the GDPR to Exponential Updated Markdown page
For EU public bodies and their data protection officers - GDPR topics (consent, records of consent, access, erasure, restriction, minimization, storage limitation, security, third parties) mapped to the features…
-
Information collection forms and privacy Updated Markdown page
For public bodies collecting data through web forms - what Exponential stores per submission, who may read and export it, the audit records of exports and removals, the absence of automatic retention, and the consent…
-
Masking in logs and the log viewer Updated Markdown page
For administrators of public sites - how Exponential masks e-mail addresses, IP addresses and secrets in request logs and in the log viewer, who may see unmasked values, and how to keep screenshots, downloads and…
-
Log retention Updated Markdown page
For administrators of public sites - how Exponential rotates and prunes its logs, the age limits that ship for 404, security and CSP logs, why other kernel logs have none by default, and how to set MaxAgeDays per log…
-
Mail categories and opt-in Updated Markdown page
For public bodies sending optional e-mail - Exponential's essential and optional mail categories, why optional ones are off until a person turns them on, double opt-in for newsletters and offers, adding your own…
-
Maps and embedded content Updated Markdown page
For public bodies showing locations, videos and other embedded services - what the ezgmaplocation extension does (a location datatype using Google Maps), the privacy effect of maps and embeds from other services, and…
-
One-click unsubscribe Updated Markdown page
For public bodies sending bulk e-mail - how Exponential makes withdrawal as easy as consent: an unsubscribe link and List-Unsubscribe headers (RFC 8058) in every optional mail, no login, immediate effect, and what the…
-
Privacy rules outside the EU Updated Markdown page
For public bodies outside the EU, or with audiences in several jurisdictions - how Exponential's privacy features relate to rules in general terms, with only the laws the project's own documents name (CAN-SPAM, CASL…
-
Privacy by design checklist Updated Markdown page
A checklist for public bodies building or reviewing a site on Exponential - privacy by design and by default from planning through launch and operation, with the setting or tool for each item.
-
A privacy notice outline for an Exponential site Updated Markdown page
For public bodies writing the privacy notice of their website - Exponential ships no notice; this outline lists the sections a notice usually has and fills in, for each, the facts an Exponential site can state (cookies…
-
Records of processing for a website Updated Markdown page
For public bodies keeping a record of processing activities - Exponential does not keep it for you; this page gives the typical processing activities of an Exponential site with the facts each entry needs (data…
-
Restriction and Deactivate and move Updated Markdown page
For public bodies that must restrict processing or retire accounts without deleting them - Exponential's Disable, Deactivate and move (opt-in, reversible, hidden group without roles) and Check user accounts, with what…
-
The right of access Updated Markdown page
For public bodies answering a data subject access request about their website - what Exponential can export directly (mail preferences and consent history, audit records), where to collect the rest (account, form…
-
The right to erasure Updated Markdown page
For public bodies answering erasure requests - what removing a user account in Exponential erases automatically (mail preferences, consent log anonymized, newsletter data through the erasure hooks), what has to be…
-
Search phrases Updated Markdown page
For administrators of public sites - Exponential's search statistics store what visitors type in the search, which can contain names or case numbers; they are off by default, switched on per siteaccess, and should be…