Privacy Policy

Last updated: September 5, 2026

1. Controller

The controller responsible for data processing on this website is:

Tobias Himstedt
Moritzstr. 20a
55130 Mainz
Germany
Email: Show email address

2. Hosting and server log files

This website is operated on a server that I run myself, located in Germany (Unraid server, located at a private household). When you visit this website, the web server automatically processes technical access data and stores it in server log files:

• truncated IP address of the accessing device
• date and time of access
• name and URL of the retrieved file
• referring URL (previously visited page)
• browser type and operating system (user agent)

This processing is carried out on the basis of Art. 6 (1) (f) GDPR, in pursuance of my legitimate interest in the stable and secure operation of the website (including error analysis and protection against attacks and abuse). This data is not merged with other data sources.

The logs are stored with a size limit and rotated automatically (3 files of 10 MB maximum; the oldest entries are overwritten).

3. Cloudflare

This website is provided via a Cloudflare Tunnel, a content delivery network/proxy service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. All requests to this website are routed through Cloudflare's infrastructure; in the process, IP addresses and technical access data may be processed in order to establish the connection, fend off attacks, and speed up delivery.

Cloudflare is certified under the EU–US Data Privacy Framework (https://www.dataprivacyframework.gov). In addition, a data processing agreement including the EU Commission's Standard Contractual Clauses is in place for data transfers. The legal basis is Art. 6 (1) (f) GDPR (secure and efficient website operation).

4. Cookies

This website does not set any cookies and uses no tracking or analytics tools. No user profiling takes place. A consent banner is therefore not required (§ 25 TDDDG, German data protection law for digital services).

Exception: the security features of Cloudflare may, in exceptional cases (e.g. suspected bot traffic), set technically necessary cookies (e.g.cf_clearance) to verify that a request originates from a human. These cookies are strictly necessary for the operation of the website and do not store any personal profile data.

5. External content and fonts

All content (images, videos, fonts) is delivered directly by this server. No third-party content (such as Google Fonts, YouTube, or social media plugins) is embedded.

6. Contacting me

If you contact me by email, I process the data you provide (name, email address, message content) exclusively for handling your request (Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR if your request concerns a contractual matter). Your data will be deleted as soon as it is no longer required for the purpose and no statutory retention obligations prevent deletion.

7. Your rights

Under the GDPR, you have the following rights at any time:

• access to your data (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for your place of residence or the authority responsible for my place of business.

8. Data security

This website is provided exclusively via an encrypted TLS connection (HTTPS).

9. Changes to this privacy policy

I reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to the website. The version published on this page applies.