Privacy policy

Last updated: 18 June 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

Edmund Wallner — contact details in the legal notice.

2. Overview

This site collects as little data as technically possible. There is no analytics, no advertising, no tracking, no third-party fonts, and no embedded third-party content. The only value stored in your browser is your theme preference (see §6), which never leaves your device.

The sections below describe each case in which personal data (chiefly your IP address) is processed.

3. Hosting and server log files

The site runs on a private server (a Raspberry Pi) located in Germany. When you open a page, the server automatically records the data your browser transmits in log files:

  • IP address of the requesting device
  • date and time of the request
  • the requested URL and HTTP status code
  • referrer URL (the page you came from), if sent
  • the browser’s user-agent string

Purpose & legal basis: operating and securing the site, and diagnosing faults — Art. 6 (1) (f) GDPR (legitimate interest in a stable, secure service).

Retention: log entries are deleted automatically after 14 days, unless a concrete security incident requires longer retention.

4. Content delivery via Cloudflare

Traffic between your browser and the server is routed through Cloudflare’s content delivery network (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), specifically via Cloudflare Tunnel. Cloudflare processes your IP address, connection metadata, and the transmitted data to deliver the site securely and quickly (TLS termination, DDoS protection, caching).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in availability, performance, and protection against attacks).

Transfer to a third country: data may be processed in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Details: https://www.cloudflare.com/privacypolicy/.

5. Fonts

The fonts (Montserrat and Geist Mono) are served locally from this domain. No connection to Google Fonts or any other third party is made to load them.

6. Cookies and local storage

This site sets no tracking cookies. The only thing stored in your browser is the key ew-theme (light or dark) in localStorage, so the site remembers your appearance preference between visits. This value is technical, requires no consent, and never leaves your device.

Cloudflare may set strictly necessary cookies as part of its security and bot-detection functions; see Cloudflare’s policy linked above.

7. Blog content (GitHub)

Posts and projects are authored as GitHub issues and fetched by the server to render them. These requests are made server-side, using my own access token — no visitor data is transmitted to GitHub when you browse this site. If you follow an external link (for example to GitHub in the footer), the respective provider’s terms apply from that point on.

8. Your rights

Under the GDPR you have the right to:

  • access the personal data stored about you (Art. 15)
  • rectification of inaccurate data (Art. 16)
  • erasure of your data (Art. 17)
  • restriction of processing (Art. 18)
  • data portability (Art. 20)
  • object to processing (Art. 21)
  • withdraw consent at any time, where processing is based on consent (Art. 7 (3))

To exercise any of these, an informal email to the address in the legal notice is enough.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about my processing of your personal data. An overview of German authorities is available here: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

10. SSL/TLS encryption

This site uses TLS encryption for all connections (recognisable by https:// and the padlock in your browser). While encryption is active, the data you exchange with the site cannot be read by third parties.

11. Changes to this policy

I will update this policy when the technical setup or the legal situation changes. The current version always carries the effective date shown under the title.