Privacy Policy

Last updated: 9 September 2026.

This is a personal website. It sets no tracking cookies, embeds no third-party fonts, and has no contact form. The only personal data processed is what is technically required to serve the pages and privacy-first, cookieless measurement.

Controller

Hosting & server logs

This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit, Vercel automatically processes technically necessary access data (e.g. your IP address, date and time of the request, the requested page, referrer and user agent) to deliver the site and keep it secure. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure, functioning website).

Because Vercel is based in the USA, this can involve a transfer of data to a third country. The transfer is safeguarded by a data processing agreement with EU Standard Contractual Clauses and Vercel's participation in the EU–US Data Privacy Framework. Server logs (including IP addresses) are retained for a maximum of 30 days for security and debugging purposes before being automatically deleted.

Cookieless, privacy-first analytics

To understand how visitors engage with my writing and content, this site employs a privacy-first, first-party measurement method. It sets no cookies, uses no client JavaScript for tracking, and stores no persistent user identifiers.

Page views are recorded server-side via a 1×1 pixel image request. The analytics engine captures:

• Requested page URL path and language.
• Coarse device class (desktop, mobile, tablet), coarse browser, and operating system family.
• Coarse geographic location (country, region, city) resolved at the edge without storing IP addresses.
• Referrer domain (reduced to origin only, discarding full URL paths or queries).
• A daily rotating, salted cryptographic hash used solely to count unique visitors per day, which resets every midnight UTC and cannot track you across days.

If your browser sends a Sec-GPC (Global Privacy Control) or DNT (Do Not Track) header, your visits are ignored and never recorded. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in measuring aggregate audience interest with zero invasive tracking).

Outbound redirect

The “Visit Solobit Games” link uses a first-party redirect (/go/solobitgames) that records a conversion count and forwards you to solobitgames.com with attribution parameters. It sets no tracking cookie.

Contact by email

If you email me, your message and address are processed solely to handle your enquiry (Art. 6 (1)(b) and (f) GDPR) and are not passed on.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object (Art. 15–21 GDPR). You also have the right to lodge a complaint with a supervisory authority — for Berlin, the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI).