Privacy statement
Short version: this site collects nothing unless you send it something. There is no account and nothing tracking you. The longer version is below, and it describes what the site does, section by section.
99six is run by Dryn B.V., Oude Haagweg 46 E, 2552 EP Den Haag, Netherlands, KvK 97899321. Dryn B.V. is the controller of any personal data this site handles. Write to it at hello@99six.dev, which is the only address this site asks you to use.
Nothing beyond the server logs the host keeps for every website, plus whatever you type into the booking page if you choose to book, or into one of the site's forms if you send one. There is no sign-up and no profile of you anywhere.
A server log line is your IP address, the moment of the request, the page asked for and the browser string your browser sends. It is written by the host, not by any code on this page, and it is not read for analytics.
Neither. This site sets no cookies, keeps nothing in your browser beyond where you scrolled during this visit (and, if you try the Brightpension demo app, that demo's own progress), and runs no analytics product, which is also why you were not asked to accept anything on arrival. Once you start filling in one of the two forms, Cloudflare's check that you are a person (section 04) keeps a small entry of its own in your browser, under challenges.cloudflare.com.
Opening a page here makes your browser fetch nothing from anywhere other than 99six.dev, with two exceptions: the booking page loads the Cal.com calendar, and the two forms load Cloudflare's check that you are a person once you start filling one in. Those servers see your IP address and your browser string, because that is how an HTTP request works. Reading a page gives them nothing else.
What Cloudflare's check looks at, and what Cloudflare keeps, is set by Cloudflare's Turnstile privacy addendum.
The fonts are served from 99six.dev itself, so opening a page here does not contact Google.
The booking page shows Cal.com's calendar inside it, so opening that page loads the calendar from Cal.com. If you book, you give Cal.com your name, your email address and the slot you picked, and 99six sees that booking. Nothing reaches Cal.com until you open the booking page yourself.
What Cal.com keeps, and for how long, is set by Cal.com's own privacy statement.
The "Ask a question" form on the blog sends what you type to 99six.dev: your question, your email address, your name if you give it, and the page you sent it from. Like every request to this site, it passes through Cloudflare, which carries the site's traffic. The site's server does not keep it: it is sent straight on as an email to the hello@99six.dev mailbox, which runs on Google Workspace, and answered from there. The kind of browser you used is included (for example "Safari"), never its full description.
Your email address is used to answer you and for nothing else, unless you tick the box asking to hear when 99six publishes something new. That choice goes with your question in the same email, and you can withdraw it at any time by writing to hello@99six.dev.
To stop the form being flooded, the site keeps a one-way code made from your IP address each time a question is sent. Your IP address itself is never stored, and codes older than 24 hours are deleted the next time anyone sends a question.
Every "email us" link on this site opens your own mail client, addressed to hello@99six.dev. Your message lands in that mailbox and stays there; it is not forwarded into any other tool.
The challenge form is different: it sends what you type to 99six.dev. That is the problem you describe, what you have already tried if you fill it in, the two answers you pick, your name, your email address, and your company and role if you give them. Like the questions in section 06, the site's server does not keep it: it is sent straight on as an email to the hello@99six.dev mailbox on Google Workspace, where both of us read it. The kind of browser you used is included (for example "Safari"), never its full description. The same one-way code from your IP address stops the form being flooded; your IP address itself is never stored. Your email address is used to answer you and for nothing else. If the send fails, the form offers to put what you typed into an email from your own mail client instead.
Under the GDPR you can ask what personal data is held about you, ask for it to be corrected or deleted, and complain to the Dutch data protection authority. Ask at hello@99six.dev.
It changes when the site does. Adding analytics, a contact form or a new third-party embed is a change to sections 02, 03 and 04, and it is made in the same commit as the change itself.