Home / Privacy Policy

Privacy Policy

This privacy policy explains what happens — and, mostly, what does not happen — to your data when you visit this website. It is a static site: there are no accounts, no newsletter, no comment system and no contact form.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Anton Romanyuk
Am Schleifweg 3, 89331 Burgau, Germany
E-Mail:

No advertising, no cross-site tracking

This site shows no advertising, does not embed social-media widgets or third-party trackers, and does not set any tracking or marketing cookies. There is no profiling and no automated decision-making, and your data is never sold or used to target you across other websites. The site does not use analytics products that build a profile of you, such as Google Analytics. To understand aggregate traffic, I may use privacy-friendly, cookieless measurement (for example, Cloudflare Web Analytics or server-log evaluation) that reports totals such as page views and broad regions and does not identify individual visitors (see “Hosting and server log files” below).

Cookies and local storage

The site itself sets no cookies. It uses your browser's local storage for two strictly functional values that never leave your device and are not used to identify you:

  • vb-theme — remembers your light/dark theme preference.
  • vb-consent — remembers that you dismissed the privacy notice so it isn't shown again.

You can clear these at any time via your browser's site-data settings. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional site); these are strictly necessary functional values within the meaning of § 25 (2) TDDDG.

The site's security and content-delivery provider, Cloudflare (see “Hosting and server log files” below), may use security cookies depending on the protection features enabled. These can include __cf_bm for bot detection and cf_clearance for completed security challenges. Cloudflare states that __cf_bm expires after 30 minutes of inactivity and can contain a session identifier when its anomaly detection feature is enabled. These security cookies are not advertising cookies. See Cloudflare's cookie documentation for their purposes and lifetimes. Where storage is strictly necessary to deliver the requested service, § 25 (2) TDDDG applies; the processing basis is Art. 6 (1)(f) GDPR (legitimate interest in a secure website).

Self-hosted fonts

All web fonts are served directly from this website. No fonts are loaded from Google Fonts or any other third party, so your IP address is not transmitted to Google or other font providers when the page renders.

Hosting and server log files

The site is delivered through Cloudflare (a content delivery network and reverse proxy) in front of a web-hosting provider. For the technical delivery and security of the site, the hosting infrastructure automatically processes information that your browser transmits, which may be recorded in server log files:

  • IP address
  • date and time of the request
  • the page/resource requested
  • referrer URL (the page you came from), if sent by your browser
  • browser type and version, and operating system

This processing is necessary to deliver the site reliably and to protect it against attacks and abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website). Cloudflare may process this data on the controller's behalf as a processor; where data is transferred outside the EU/EEA, it is safeguarded by the EU Standard Contractual Clauses. Log data is retained only as long as needed for these purposes and then deleted.

Cloudflare may also provide me with aggregate, cookieless analytics about how the site is used (such as total page views and broad geographic regions). Where this relies on a lightweight measurement script served from Cloudflare's network, that script sets no cookies, builds no profile of you, and does not identify individual visitors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and securing site traffic).

Contacting me by e-mail

If you contact me by e-mail, the data you send (your e-mail address and the contents of your message) is processed solely to handle your request. Legal basis: Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR where your request relates to a (pre-)contractual matter. This data is not passed on to third parties and is deleted once it is no longer required.

External links

This site links to external services (e.g. GitHub, X/Twitter, the Wing Commander Saga project). These are plain hyperlinks — nothing from those services is embedded or loaded until you choose to follow a link. Once you do, the privacy policy of the respective provider applies.

Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15);
  • rectification (Art. 16) and erasure (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw any consent you have given, with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). To exercise any of these rights, contact me at the address above.

This policy describes the site as it is actually built. If the site changes (for example, if analytics or embedded content are ever added), this policy will be updated accordingly.