Privacy policy.
This site collects as little personal data as possible. What it does process is described here.
Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes technical connection data (including your IP address, date and time of the request, browser type) in server logs. This is necessary to deliver the website and to ensure its stability and security (Art. 6 (1) (f) GDPR). For the transfer to the USA, Vercel Inc. is certified under the EU-U.S. Data Privacy Framework, for which the Commission has determined an adequate level of data protection (Art. 45 GDPR).
Newsletter
If you subscribe to the newsletter, sign-up uses a double opt-in procedure: after subscribing you receive a confirmation email, and your subscription becomes effective only once you click the link it contains. The legal basis is your consent (Art. 6 (1) (a) GDPR); the sign-up is logged for verification. Your address is used solely to send the newsletter. You can withdraw your consent at any time via the unsubscribe link in every email; your address is then deleted. The newsletter is sent using Buttondown LLC (USA) as a processor; the transfer to the USA is safeguarded by the EU standard contractual clauses (Art. 46 (2) (c) GDPR).
Contact by email
If you contact me by email, your message and address are processed to handle your enquiry (Art. 6 (1) (b) and (f) GDPR) and retained only as long as necessary for that purpose or required by statutory retention periods.
No cookies
This site sets no cookies. Fonts are self-hosted; no requests are made to third-party font services. If you switch the site language, that preference is stored locally in your browser (localStorage) and never leaves your device.
Analytics
To understand which pieces actually get read, usage of this site is measured anonymously, using Umami (Umami Software, Inc., USA).
Doing so sets no cookies and stores nothing on your device. No consent under § 25 TDDDG is required, which is why you see no cookie banner here. What is recorded: pages visited, referring site, approximate region, device type, browser, screen resolution and browser language. Your IP address is processed only momentarily and not retained. Individuals cannot be identified, and no cross-site profiles are built.
The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is statistical analysis of site usage to improve its content and technology. The data is processed in the service's EU region. The provider is Umami Software, Inc., based in the USA; a data processing agreement under Art. 28 GDPR is in place, and standard contractual clauses under Art. 46 GDPR cover any access from the USA. Statistics are retained for as long as the account exists; they are not combined with other sources and not passed on to third parties.
Right to object: You may object to this processing at any time under Art. 21 GDPR. If your browser offers a “Do Not Track” setting, enabling it is enough — measurement is then suppressed automatically. Otherwise an informal message to the email address above works just as well, and content blockers usually prevent measurement too. The only thing ever read from your device is such an opt-out setting, if you have set one yourself.
Encryption
All traffic between your browser and this site is encrypted via SSL/TLS.
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing of your personal data. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, email me at the address above.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work.
Last updated: July 2026