What this site knows about you. Not much.

This page sets no cookies, loads nothing from third parties, has no forms and no accounts. Two things do process data: the hosting, and a cookieless visitor count. Both are described below, along with your rights.

1. Controller

As a private individual I am not required to appoint a data protection officer and have not done so. Questions about this page go to the address above.

2. Hosting and server logs

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser sends a request to Vercel's servers, and Vercel records the usual access data: your IP address, date and time, the page requested, the referring page, browser type and version, operating system, and the response status. Vercel processes this data on my behalf under a data processing agreement.

The purpose is to deliver the site, keep it running and defend it against abuse. The legal basis is my legitimate interest in operating a secure and reliable website, Art. 6 (1) (f) GDPR. The data is not merged with other sources and is not used to identify you.

Vercel is based in the United States. It is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing adequate protection (Art. 45 GDPR); in addition, the data processing agreement includes the EU standard contractual clauses (Art. 46 (2) (c) GDPR).

3. Visitor statistics without cookies

I use Vercel Web Analytics to see how many people visit and which parts of the page they look at. It loads from this site's own domain, not from a third party, and it does not set cookies or store anything in your browser.

To tell one visit from another, Vercel derives a hash from the incoming request. That hash is not stored permanently: a visit is discarded after 24 hours, and nothing links visits across days or across other websites. What I see is aggregated: page views, the referring site, the country and region, browser, operating system and device type. I never see IP addresses or anything that identifies a person.

The legal basis is my legitimate interest in knowing whether the site is read and by roughly whom, Art. 6 (1) (f) GDPR. Because nothing is stored on or read from your device, the consent requirement of § 25 TDDDG does not apply, which is why there is no consent banner.

4. Your theme choice

The page follows your system's light or dark setting. If you press the theme switch in the top corner, your choice is saved in your browser's local storage under the key theme, so that the next visit starts the way you left it. That value is written only when you press the switch, is read only by this site, and is never sent anywhere. Storing it is necessary to provide the function you asked for (§ 25 (2) no. 2 TDDDG). You can remove it at any time by clearing this site's data in your browser.

5. Fonts, images and scripts

All fonts, images and scripts are served from this site's own domain. Opening a page here does not cause your browser to contact Google Fonts, a content delivery network or any other third party.

6. Email

If you write to me, I process your address and whatever you tell me in order to answer. The legal basis is Art. 6 (1) (b) GDPR where you are asking about working together, and otherwise my legitimate interest in replying to people who write to me, Art. 6 (1) (f) GDPR. I keep correspondence as long as the conversation needs it and as long as tax and commercial law require, then delete it.

7. Links to other sites

This site links to GitHub, LinkedIn, Behance and to the projects it shows. Nothing is loaded from those sites while you are here; only when you follow a link does their operator process your data, under their own privacy notice.

8. Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have data erased (Art. 17) or its processing restricted (Art. 18),
• receive the data you provided in a portable format (Art. 20),
• object to processing based on legitimate interests (Art. 21).

You can also complain to a supervisory authority. The one responsible for me is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany, lfd.niedersachsen.de.

9. What does not happen here

No profiling, no automated decisions, no advertising, no sale or sharing of data. You are not obliged to provide any personal data to use this site; the only data that flows is what your browser sends by opening a page.