Privacy Policy

Responsible party

André Conrad Charles Flitsch B.Sc (hons)
Am Grünholzbach 1, 6305 Itter, Austria
E-Mail: [email protected]

Hosting

This website is hosted on Cloudflare Pages. Cloudflare may process technical data such as IP addresses in server logs for security and performance purposes. This processing is based on legitimate interest (Art. 6(1)(f) GDPR). See Cloudflare's privacy policy for details.

No cookies

This website sets no cookies and uses no advertising or cross-site tracking scripts. It does not build a profile of you, and it does not share data with advertisers. The three third-party services it does load are described below.

Analytics

This site uses Plausible Analytics to count visits. Plausible is a privacy-focused, cookieless analytics service that stores all data in the European Union. It sets no cookies, uses no persistent identifier, and does not track you across websites or sessions. Your IP address is never stored. It is used only to generate a daily, salted hash that counts a visitor once per day, and that salt is discarded every 24 hours.

Plausible records the page address, the referring site, and coarse browser, operating system, device type and country information derived from your request. Alongside page views, this site records three custom events: scroll depth on an article, a rough bucket for time on page, and a counter for pages that are not found. None of these events contain personal data.

This processing is based on legitimate interest (Art. 6(1)(f) GDPR): understanding which articles are read, without identifying who reads them. The analytics script loads only on the live site, never during local development. See Plausible's privacy policy and their data policy.

Alongside Plausible, and until February 2027 when the Plausible subscription ends, this site also uses PostHog, a product analytics platform provided by PostHog Inc. Event data is stored and processed on servers within the European Union (Frankfurt, Germany). A data processing agreement under Art. 28 GDPR is in place with PostHog. PostHog Inc is based in the USA; where access from a third country occurs, it is safeguarded by the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

PostHog runs on this site without cookies. It stores neither cookies nor data in your browser. To count visits without recognising you, PostHog derives a check value on its own servers from your IP address, your browser identifier, the domain name and a random value that changes daily and is deleted once that day is processed. The check value cannot be reversed. It lets your page views count as one visit within a single day; beyond that day there is no recognition, and none across devices. PostHog records pages visited and time of visit, clicks and page navigation, time spent on pages, the referring page, browser and operating system, device type and screen resolution, the country, which this site's hosting provider derives from your IP address before the address is discarded, links to other sites that you click, files you download, pages that are not found, and the words you type into the site search. Event data is routed through this site's own domain and processed directly on PostHog servers within the EU. The legal basis is the same legitimate interest as above, you may object at any time via the imprint, and a content blocker in your browser prevents collection entirely.

Comments

The comment section under each article is giscus, which stores comments as GitHub Discussions. When you open an article, your browser loads a script from giscus.app and content from GitHub, so those services receive your IP address and browser information. Reading comments needs no account. To write a comment you sign in with GitHub, and your comment, your GitHub username and your avatar then become public in the public discussions repository. See the GitHub privacy statement.

Local storage

If you use the Mastodon share button, this site uses your browser's local storage to remember the instance you entered, so you only type it once. This data stays entirely in your browser and is never transmitted to any server.

Sharing buttons

The share buttons below each article are plain links, not widgets. No script, iframe, pixel or cookie from Bluesky, Mastodon, Hacker News, LinkedIn, X, Reddit, Telegram, WhatsApp, Facebook or Threads is loaded when you open a page. Nothing is sent to any of those services unless you click one of the buttons, and the links carry no referrer. The copy link and email buttons never leave your browser.

Fonts

All fonts are self-hosted on the same domain. No requests are made to Google Fonts or other third-party font services.

External links

This site contains links to external websites. We have no control over the content or privacy practices of those sites and accept no responsibility for them.

SSL/TLS encryption

This site uses SSL/TLS encryption for all connections. You can recognise this by the lock icon in your browser's address bar.

Your rights under GDPR

You have the right to access, correction, deletion, restriction of processing, data portability, and objection regarding any personal data. This site itself stores no personal data about you, so in most cases there is nothing to request. For the data that GitHub holds for a comment you wrote, contact GitHub or delete the comment in the discussion. If you have questions, contact: [email protected]

Complaints

You have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien
www.dsb.gv.at