Privacy
Controller
The controller for data processing on this site is Daniel Hug. The postal address is in the legal notice.
Hosting
The site is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data such as IP address, time and requested URL to deliver the site and protect it from attacks. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is secure and stable operation. Cloudflare is certified under the EU-US Data Privacy Framework.
Analytics with PostHog
To understand which content gets read, I use PostHog (PostHog Inc., 2261 Market St., San Francisco, CA 94114, USA) with data stored in the EU (Frankfurt). It records pages viewed, clicks on the page, the referring page, device type, browser and an approximate location (country, city) derived from the IP address. The IP address itself is not stored. Without your consent PostHog stores nothing in your browser, and each page view is counted on its own. The legal basis for this is Art. 6 (1) (f) GDPR; my legitimate interest is analysing how this site is used. If you choose “Yes, sure” in the notice, PostHog also keeps a random ID in your browser’s localStorage so that the page views of one visit are linked. The legal basis is then your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). If you choose “Clicks + recording”, PostHog also records your session (page content, scrolling, clicks and mouse movement) so I can replay it like a video. Input in form fields stays hidden. The legal basis is again your consent. You can withdraw it at any time via “Tracking settings” in the footer; the ID is then deleted and any running recording stops.
Feedback box
On the About page you can send me anonymous feedback. The text is transmitted to and stored by PostHog. Please do not include names or contact details. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is improving the site based on your feedback.
Storage in your browser
The site saves your colour scheme choice (light/dark) and your analytics decision in your browser’s localStorage. Both are required for the respective feature (§ 25 (2) no. 2 TDDDG) and never leave your device.
Your rights
You have the right of access, rectification, erasure and restriction of processing, the right to data portability, and the right to object to processing based on Art. 6 (1) (f) GDPR. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.