Privacy Policy

In short

This is a static personal blog. It has no user accounts, no comment system, no contact form, no newsletter, no analytics, no advertising, no tracking cookies and no embedded third-party content. Personal data is processed in only two situations:

• Technically, when your browser requests a page — the hosting provider (Cloudflare) receives your IP address and connection data to deliver the site. See Hosting.
• When you contact me by email — I process what you send me in order to answer. See Contact by email.

Controller (Verantwortlicher)

The controller within the meaning of Art. 4 (7) GDPR is the person who operates this website:

As a private individual running this site I am not required to appoint a data protection officer (Art. 37 GDPR, § 38 BDSG) and have not appointed one. Please direct any privacy questions to the email address above.

Hosting and server logs (Cloudflare)

This site is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”).

Whenever your browser requests a page or file from this site — including the RSS feed and the search index files described below — it sends technical connection data to Cloudflare's servers. Cloudflare processes this data to deliver the site to you and to detect and block attacks and abusive traffic:

• IP address of the requesting device
• Date and time of the request
• Requested URL and transferred data volume
• HTTP status code
• The page you came from (referrer), if your browser sends one
• Browser type and version, operating system (user agent)

Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest is to operate a fast, secure and reliable website. Without this data the site cannot be delivered to your browser.

Storage period: Cloudflare retains these logs only as long as necessary for security and troubleshooting, then deletes or anonymises them. I do not evaluate the logs myself and do not combine them with any other data.

Cookies: This site itself sets no cookies. If Cloudflare's bot protection is triggered by unusual traffic, Cloudflare may set a strictly necessary cookie (for example __cf_bm, valid for 30 minutes) solely to tell humans from automated requests. Such a cookie is technically required and needs no consent (§ 25 (2) no. 2 TDDDG).

Transfers outside the EU: Cloudflare operates a global network, so connection data may be processed in the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework, and Cloudflare's Data Processing Addendum, which includes the EU Standard Contractual Clauses, applies to my use of the service. Details: Cloudflare Privacy Policy and Cloudflare Customer DPA.

Fonts, scripts and styles

All fonts (Inter, IBM Plex Mono), scripts and stylesheets are served from this site's own domain. Your browser makes no requests to Google Fonts or to any other content delivery network while you read.

Theme preference (local storage)

The site follows your system's light or dark mode. If you use the theme toggle in the header, your choice (light or dark) is saved in your browser's local storage under the key theme, so the site can apply it on your next visit. This value stays on your device, is never transmitted to me or to anyone else, and contains no personal data. It has no expiry date; you can remove it at any time by clearing this site's data in your browser.

Legal basis: § 25 (2) no. 2 TDDDG — storing the setting is strictly necessary to provide a function you explicitly requested. No consent banner is therefore required.

Search

Site search runs entirely in your browser. When you type a query, the browser downloads small pre-built index files from this site (these requests appear in the server logs described under Hosting); your search terms themselves are not sent to me or to any server, and are not stored.

Contact by email

If you email me, I process your email address, your name if you give it, and the content of your message in order to reply and to handle whatever you are contacting me about.

Legal basis: Art. 6 (1) (b) GDPR where your message concerns a contract or a request before one (for example a project or job enquiry); otherwise Art. 6 (1) (f) GDPR, based on my legitimate interest in answering the people who write to me.

Storage period: I delete the correspondence once your request has been dealt with and no statutory retention obligation requires me to keep it.

Email provider: My mailbox is provided by Zoho Mail, a service of Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands (“Zoho”). My account is registered with Zoho's European data centre, so emails you send me are stored and processed on Zoho's servers in the European Union (Amsterdam, Netherlands, and Dublin, Ireland). Zoho may access data from other countries where it operates, for example for technical support; such transfers are covered by Zoho's Data Processing Addendum, which is based on the EU Standard Contractual Clauses. Details: Zoho Privacy Policy and Zoho and the GDPR.

Links to other websites and share links

This site links to external websites such as GitHub, X and LinkedIn. These are plain links: no scripts, widgets or pixels from those services are loaded while you are here, and no data is sent to them until you click a link. The “Share” links under each article work the same way — they open the respective platform in a new tab, and only then does that platform receive the address of the article and, if you are logged in there, associate it with your account. The email share link simply opens your own mail program.

When you follow an external link, your browser sends at most the address of this site — never the full page URL — to the destination as the referrer. What the external site does with your data is governed by its own privacy policy.

No analytics, no tracking, no profiling

This site uses no web analytics, no advertising networks, no social media plug-ins and no tracking pixels. I do not build profiles of readers and do not use automated decision-making within the meaning of Art. 22 GDPR. If that ever changes, this page will be updated first.

Your rights

With regard to personal data concerning you, you have the right to:

• access the data I hold about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR),
• have processing restricted (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• withdraw any consent you have given, with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): where I process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object at any time for reasons arising from your particular situation. I will then stop processing the data unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

To exercise any of these rights, email me at support@jiss.dev.

Right to lodge a complaint (Art. 77 GDPR): you may also complain to a data protection supervisory authority, in particular in the EU member state where you live, work or where the alleged infringement took place. The authority responsible for me is:

Do you have to provide data?

You are not legally or contractually obliged to provide any personal data to use this site. The only data that is technically unavoidable is the connection data your browser sends to the hosting provider; without it a page cannot be delivered.

Changes to this policy

I will update this policy whenever the site changes in a way that affects how data is processed — for example if I add comments or analytics. The current version is always available at this address. This version was last updated on 15 September 2026.