Privacy policy

The site runs on Amazon Web Services, on a server in Frankfurt. The server (like any other web server) logs your IP address, your browser, and the page you opened. Logs are regularly deleted after 30 days.

If you switch between light and dark mode, the choice is saved in your browser's local storage.

I use Umami (opens in a new tab)  to see how many people visit and which articles they read. It's a privacy-friendly alternative to Google Analytics. It doesn't use cookies or store your IP address. You can read more about them at Umami's privacy policy (opens in a new tab) .

Comments under articles run on giscus (opens in a new tab) , which stores them in GitHub Discussions. The comments section loads from giscus and GitHub, so both of them see your IP address when you open a post.

To comment, you need to sign in with GitHub. After that, your GitHub name, avatar, and comment are public, and giscus saves a token in your browser's local storage to keep you signed in. You can read more in GitHub's privacy statement (opens in a new tab) .

The legal basis for all of this is my legitimate interest in running and improving the blog (Art. 6(1)(f) GDPR). AWS, GitHub, and Umami are US companies, so some data may end up in the US, under the EU-US Data Privacy Framework or Standard Contractual Clauses.

You can ask me to fix, delete, or export your data, or to limit how I use it. You can also object to this at any time by sending me an email.

If you're unhappy with how I handle your data, you can file a complaint with a data protection authority.