itobey.dev

Privacy

Short version

This site is a personal blog. It has no analytics, no advertising, no tracking pixels, no cookie banner, and no third-party fonts or scripts loaded on a normal page view. Three things process personal data: server logs, the comment system (only if you open it), and the contact form (only if you use it).

Who is responsible

Tobias, the author of this blog. Reach me at [email protected], or through the contact form.

Server logs

Every request to this site is logged by the web server, including your IP address, the URL requested, the time, and your browser’s user-agent string. This is ordinary web-server operation and is used to keep the site running and to investigate abuse.

  • Legal basis: legitimate interest (Art. 6 (1)(f) GDPR) in operating and securing the site.
  • Retention: 30 days.
  • Recipients: the site runs on a virtual server I rent from a hosting provider. A processing agreement under Art. 28 GDPR is in place with them. There are no other recipients — no CDN, no analytics service, no log shipping to anyone.

Comments

Comments are provided by Remark42, self-hosted by me at comments.itobey.dev. It runs on the same server as this site; comment data is not sent to any third party.

The comment widget does not load until you click “Load comments.” If you never click it, no comment-related data about you is processed at all and no cookies are set.

If you do post a comment, the following is stored:

  • the comment text and the time it was posted
  • the display name you chose
  • your email address, if you signed in with one
  • a session token, and technical identifiers which Remark42 stores in hashed form
  • your IP address, used for spam and abuse prevention

Legal basis: consent (Art. 6 (1)(a) GDPR) — you provide this data voluntarily by choosing to comment — together with legitimate interest in preventing spam and abuse.

Retention: comments are kept indefinitely, because a comment thread that loses half its replies stops making sense. You can have yours removed at any time; see below.

Your rights: Remark42 has built-in support for both exporting everything it holds about you and deleting it. Ask me and I will run it, or email me and I will do it manually. You can also ask for correction, restriction, or objection under Art. 15–21 GDPR, and you may complain to a supervisory authority.

Contact form

The contact form sends your message, and the name and email address you type into it, to me.

  • Nothing from the form is written to a database or to disk on this server.
  • Your message is delivered to my personal account. If you rather not have your message processed on the server, email me directly at [email protected] instead.

Legal basis: consent, and legitimate interest in answering enquiries. Retention: as long as the conversation is relevant to me, then deleted.

What this site deliberately does not do

  • No analytics of any kind — no Google Analytics, no Matomo, no server-side tracker.
  • No advertising and no ad networks.
  • No cookie banner, because a normal page view sets no cookies.
  • No web fonts from a CDN. All typefaces are the ones already on your device, so no font provider ever sees your IP.
  • No social media embeds or share buttons.
  • No content delivery network in front of the site.

Embedded videos, where a post contains one, are loaded from the video provider and that provider will see your IP address when the embed loads.

Changes

If this page changes materially I will note it here with a date.

Last updated: 14.08.2026