Last updated: 18 October 2026
This blog has no analytics, no advertising and no tracking. It embeds nothing from other sites: pages, fonts and scripts all come from this server. The sections below cover the data the site does process.
Who is responsible
The controller under the General Data Protection Regulation (GDPR) is the person named in the Impressum, reachable at the email address given there.
Hosting and server logs
The site runs on a server rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which processes data on my behalf under a data processing agreement (Art. 28 GDPR). The mail server mentioned below is hosted there as well.
To deliver a page, the server necessarily processes your IP address. Each request is also recorded in an access log: your IP address, the time, the requested page, and the response status, size and duration. Your browser's headers (such as the user agent or referrer) and query strings are not recorded. Access logs are deleted after 7 days. Technical error messages are kept separately and are limited in size.
Legal basis: Art. 6(1)(f) GDPR, the legitimate interest in operating the site securely, recognising and fending off attacks, and finding faults.
To limit spam and abuse, the server also keeps your IP address in memory short-term (less than six hours after your last request) when you search, comment or use the contact form, to count how many requests come from one address. It is never written to disk.
Comments
When you write a comment, the site stores:
- the comment text, the post it belongs to and the time;
- as a guest: the name you enter and, if you give one, your email address;
- when signed in with GitHub: your GitHub user ID, username and display name.
Comments are checked by hand before they appear. A notification containing the comment, your name and, if given, your email address is sent to me by email through my own mail server (mail.staudt-technologies.com). Published comments show your name (for GitHub users with a link to your GitHub profile) and the text. Your email address is never published; it is used only to contact you about your comment.
Comments are kept until you ask for their deletion or I remove them.
Legal basis: Art. 6(1)(a) GDPR, your consent, given by submitting the comment; you can withdraw it at any time by asking for the comment to be deleted. The spam limit described under hosting is based on Art. 6(1)(f) GDPR, the legitimate interest in keeping the comment section usable.
Contact form
When you use the contact form, your name, email address, the subject and your message are sent to me by email through my own mail server (mail.staudt-technologies.com). They are not stored on this site. I keep the email as long as needed to answer you and delete it afterwards, unless the conversation has to be kept for legal reasons.
Legal basis: Art. 6(1)(f) GDPR, the legitimate interest in answering your enquiry, or Art. 6(1)(b) GDPR if it concerns a contract.
Signing in with GitHub
Signing in with GitHub is optional. If you choose it, you are sent to GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, which processes your data under its own privacy statement. GitHub is certified under the EU-U.S. Data Privacy Framework. This site then receives your GitHub user ID, username and display name.
Legal basis: Art. 6(1)(a) GDPR, your consent, given by choosing to sign in.
Cookies and local storage
The site uses no cookies until you sign in:
auth_returnis set when you click "Sign in with GitHub" and remembers which page to return to. It expires after ten minutes.bytetastic-sessionis set after you sign in and keeps you signed in. Its content is encrypted. It is deleted when you sign out or close the browser.
If you use the light/dark switch, your choice is saved in your browser's local
storage under theme. It never leaves your browser.
These are strictly necessary for functions you asked for, so they need no consent (§ 25(2) TDDDG).
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), to object to processing based on legitimate interests (Art. 21) and to withdraw consent at any time with effect for the future (Art. 7(3)). To use any of them, write to the email address in the Impressum.
You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for this site: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.