Privacy and Cookies Policy
This policy applies to the hobbyist blog and website available at this address, operated by a private individual for non-commercial purposes.
1. Data Controller:
The data controller for personal data collected or processed in connection with this website is the site owner. For any privacy-related inquiries, you can reach out via the [ Contact Page ].
This website is run for purely private, hobbyist, and non-commercial purposes.
2. Processed Data and Purpose:
Although the website does not allow user registration, public accounts, newsletters, online payments, or comments, certain limited technical data may be processed automatically when the website is visited.
This may include:
- IP address,
- date and time of the request,
- requested URL or resource,
- browser type and version,
- operating system,
- referrer URL, if provided by the browser,
- technical headers sent by the browser,
- server response codes,
- security-related events.
This data is processed for the following purposes:
- displaying and delivering the website,
- maintaining the stability of the server,
- detecting technical errors,
- protecting the website and server infrastructure against abuse, scanning, bots, spam, attacks, and unauthorized access attempts,
- understanding general website visibility and performance in search results,
- maintaining basic security logs.
3. Server Logs:
Like most websites, this website and its hosting infrastructure may automatically record server logs.
Server logs are used mainly for technical maintenance, diagnostics, abuse prevention, and security. They are not used to identify ordinary visitors unless this is necessary to investigate misuse, security incidents, or unlawful activity.
4. Cloudflare:
This website uses Cloudflare services, including Cloudflare Tunnel and Cloudflare security/network features.
Cloudflare may process visitor IP addresses, request metadata, browser headers, security events, and other technical information necessary to deliver traffic, protect the website, improve reliability, and mitigate malicious or automated traffic.
Depending on the Cloudflare features enabled, Cloudflare may set strictly necessary technical cookies, such as cookies used for bot detection, challenge verification, load balancing, traffic routing, or security clearance.
These cookies are used for security and website functionality, not for advertising by this website.
Cloudflare acts as an infrastructure and security provider for this website.
5. Google Search Console:
This website uses Google Search Console to understand how the website appears in Google Search and to monitor indexing, search visibility, technical issues, and search performance.
Google Search Console does not provide this website owner with full personal profiles of visitors. The data available in Search Console is aggregated or limited and is used to understand website performance in Google Search.
6. Security Measures / Canarytokens:
This website may use security mechanisms such as Canarytokens or similar security markers to detect unauthorized scanning, probing, or attempts to access restricted or non-public resources.
If such a security marker is triggered, technical information may be logged, including:
- IP address,
- time of access,
- requested resource,
- browser or client headers,
- user agent,
- referrer, if available.
This information is processed only for security monitoring, abuse detection, and protection of the website and server infrastructure.
7. Legal Basis:
Where the GDPR applies, the processing of technical and security-related data is based on the legitimate interest of the website owner under Article 6(1)(f) GDPR.
The legitimate interests include:
- operating a hobbyist website,
- ensuring website availability and stability,
- protecting the server and infrastructure,
- preventing abuse, attacks, spam, scanning, and unauthorized access,
- understanding the website's visibility in search engines.
If you contact the site owner voluntarily, the data you provide is processed in order to respond to your message.
8. Data Recipients:
Personal data is not sold.
Technical data may be processed by service providers necessary for the operation, protection, and visibility of the website, including:
- hosting or server infrastructure providers,
- Cloudflare, as a network, tunnel, CDN, and security provider,
- Google Search Console, for search visibility and indexing diagnostics,
- security tools used to detect abuse or unauthorized scanning.
Data may also be disclosed if required by law or necessary to protect the website owner's legal rights.
9. Data Retention:
Server logs stored directly on the origin server are usually retained for approximately 30 days, unless a longer retention period is necessary for security, diagnostics, abuse prevention, or investigation of technical incidents.
Some technical and security data may also be processed by external infrastructure providers used by this website, including Cloudflare and Google Search Console.
Cloudflare may process and retain technical, security, analytics, and account-related logs according to its own retention periods, product settings, enabled features, and service plan. These periods may differ depending on the type of log, for example request analytics, security events, Zero Trust or Tunnel-related logs, and account audit logs.
Google Search Console provides aggregated search visibility and indexing data. This data is made available according to Google's own retention rules and does not provide the site owner with full personal visitor profiles.
11. Your Rights:
Where applicable under data protection law, you may have the right to:
- access your personal data,
- request correction of your personal data,
- request deletion of your personal data,
- request restriction of processing,
- object to processing based on legitimate interest,
- lodge a complaint with a competent data protection authority.
Because this website collects only limited technical data and does not provide user accounts, identifying a specific visitor in logs may not always be technically possible.
12. External Links:
This website may contain links to external websites. The site owner is not responsible for the privacy practices, content, or security of external websites.
13. Changes to This Policy:
This policy may be updated from time to time, especially if the website configuration, security tools, analytics tools, or infrastructure providers change.