Privacy.
Short version: no cookies, no third-party tracking. A self-hosted, cookieless counter shows me which pages are read.
Controller
Dennis Kluge, Moosmattenstr. 21, 79117 Freiburg im Breisgau, Germany, hi@denniskluge.com
Hosting and delivery
This policy also covers offhours.denniskluge.com.
This site is delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technical data your browser sends — IP address, date and time, requested page, referrer and browser type — to deliver the site quickly and securely and to protect it from attacks (Art. 6 (1)(f) GDPR). Cloudflare acts as a processor under its Data Processing Addendum, which is part of its terms. Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); should that lapse, the EU Standard Contractual Clauses in the addendum apply. Cloudflare keeps this data only as long as needed for these purposes and publishes no fixed period. I don't store access logs myself.
Cookies and fonts
This site sets no cookies and stores nothing on your device. All fonts are served from this domain — no data is sent to Google or other font services.
Audience measurement (Umami)
To see which pages are read, I use Umami, open-source analytics software that I run myself. Its data is stored with my hosting provider Fly.io (Fly.io, Inc., 2261 Market Street #4990, San Francisco, CA 94114, USA) in a data centre in Frankfurt am Main and is not passed on to an analytics provider. The measuring script is loaded from this domain.
Umami records the page you visit (including URL parameters) and its title, the referring page, the time, your country, browser, operating system, device type, screen size and browser language. Your IP address is used only briefly: to determine the country, and, together with your browser's identifier, to compute a pseudonymous ID that groups the page views of one visit. The IP address itself is not stored. No cookies are set and nothing is stored on your device. If your browser sends a "Do Not Track" signal, nothing is recorded.
The legal basis is my legitimate interest in privacy-friendly audience measurement (Art. 6 (1)(f) GDPR). Fly.io acts as a processor under a data processing agreement. Fly.io is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The data is deleted automatically after 13 months.
If you write to me, I use your email address and message only to reply. I delete it when it is no longer needed.
External links
Links to LinkedIn and other sites lead to third parties. Their privacy policies apply once you follow them.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority.