Privacy policy

The short version: this site sets no cookies and doesn’t follow you across sites. It counts visits with Cloudflare Web Analytics, which stores nothing in your browser and shows me only totals. The details, as required by the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz, DSG):

Controller#

Hosting and server logs#

The site is hosted by Cloudflare, Inc.. When you open a page, your browser sends technical data that the host processes to deliver the site and keep it secure: your IP address, the date and time of the request, the requested page, the referring page, and your browser’s user agent. This happens on the basis of Art. 6 (1) (f) GDPR. My legitimate interest is operating a secure and reliable website. How long the host keeps these logs is described in its privacy policy.

Cloudflare processes this data on my behalf under its Data Processing Addendum (Art. 28 GDPR). Cloudflare, Inc. is based in the USA, so the data may be processed there. That transfer is covered by the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, under which Cloudflare is certified (Art. 45 GDPR). If that certification lapses, Cloudflare’s standard contractual clauses apply (Art. 46 GDPR).

Visitor statistics#

To see which pages are read and how fast they load, this site uses Cloudflare Web Analytics. When a page loads, a small script from Cloudflare (static.cloudflareinsights.com) measures it and sends the result to this domain (/cdn-cgi/rum): the page address, the referring page, the load timings, and your browser, operating system and device type. Cloudflare derives your country from your IP address. The script sets no cookies and stores nothing in your browser, and according to Cloudflare it doesn’t fingerprint you or follow you across sites. I only see totals, such as page views per page or visits per country, never individual visitors.

This happens on the basis of Art. 6 (1) (f) GDPR. My legitimate interest is knowing which content is useful and whether the site is fast. Cloudflare processes this data on my behalf as well, with the same safeguards for the US transfer as above. You can object at any time (Art. 21 GDPR); blocking static.cloudflareinsights.com in your browser or with a content blocker also stops the script.

Cookies and other providers#

• The site sets no cookies.
• Fonts, scripts, styles and images are served from this domain. The only exception is the Cloudflare Web Analytics script described above.
• If you switch between light and dark mode, the choice is saved in your browser’s local storage under the key theme. It never leaves your device, and you can delete it by clearing the site data in your browser. Saving it is strictly necessary for the setting you asked for, so it needs no consent (§ 165 (3) of the Austrian Telecommunications Act, TKG 2021).

Contact by email#

If you email me, I use your address and message only to reply, on the basis of Art. 6 (1) (f) GDPR, and delete them once the conversation is over and no legal retention period applies. Mail to the address above is received by Cloudflare Email Routing (with the same US transfer safeguards as above) and forwarded to my personal mailbox, which is hosted in Europe.

Links to other sites#

Links to GitHub, LinkedIn and other sites are plain links. Nothing is sent to those sites until you click one; from then on, their privacy policies apply.

Your rights#

You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). To use any of these rights, email me at the address above.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). In Austria, that’s the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, dsb.gv.at.

Last updated: October 31, 2026.