Privacy Policy

The controller under the General Data Protection Regulation (GDPR) is:

When you open this website, technical access data is processed to deliver the requested pages and to maintain security and stability. This can include your IP address, request time, requested URL, referrer, browser and operating-system information, response status, and transferred data volume. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are secure, reliable, and efficient website operation.

The hosting provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Access data is kept only for as long as necessary for operation, error diagnosis, and security, based on the Vercel plan and settings in use. It may be retained longer where needed to investigate an incident or comply with law. Data transfers are protected, as applicable, by the EU–US Data Privacy Framework and Standard Contractual Clauses. See Vercel's Privacy Notice and Data Processing Addendum.

Article images are currently loaded directly from images.unsplash.com. This sends technical connection data, including your IP address and browser request headers, to Unsplash and its delivery provider. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is providing optimized editorial imagery. See the Unsplash Privacy Policy.

If you consent, this site uses Vercel Web Analytics to measure page views and understand which content and technical configurations are useful to visitors. The purpose is to improve the website and its editorial content. The legal bases are your consent under Article 6(1)(a) GDPR and § 25(1) TDDDG.

The analytics script is not loaded before you accept analytics. You can reject analytics without losing access to the site and change your choice at any time through Privacy settings in the footer. Withdrawing consent stops future collection and does not affect processing that occurred before withdrawal.

Vercel may process the event time, page URL without query parameters or fragments, referrer, coarse location derived from the request, browser, operating system, and device type. The sign-in route is excluded. Vercel Web Analytics does not set analytics cookies or track visitors across different websites. A request-derived visitor identifier resets after 24 hours, while aggregated reports are retained according to the reporting window of the Vercel plan and settings in use.

Vercel Inc. acts as a service provider for this processing. Transfers to the United States are protected, as applicable, by the EU–US Data Privacy Framework and Standard Contractual Clauses. See Vercel's Web Analytics privacy documentation, Privacy Notice, and Data Processing Addendum.

If you choose to sign in, the site processes your email address, a user identifier, authentication and security metadata, session information, and profile details you voluntarily add, currently name and interests. This data is used to send a one-time sign-in link or code, maintain your account, secure restricted features, and provide the service you request.

Providing an email address is optional, but it is required to use sign-in and subscriber features. Account processing is based on Article 6(1)(b) GDPR. Security and abuse prevention are based on Article 6(1)(f) GDPR. If an editorial newsletter is offered, it is sent only with consent under Article 6(1)(a) GDPR and applicable German direct-marketing law. Consent can be withdrawn at any time.

Authentication and profile data are handled by Supabase, Inc. The project is hosted in the European Union. Supabase and its subprocessors may process limited data outside the EEA under its Data Processing Addendum and Standard Contractual Clauses. See the Supabase Privacy Policy and Data Processing Addendum.

Transactional sign-in emails are delivered through Resend, operated by Plus Five Five, Inc., USA. Resend receives the recipient address, message content, and delivery metadata necessary to deliver and secure the email. Transfers are protected, as applicable, by the EU–US Data Privacy Framework and Standard Contractual Clauses. See Resend's Privacy Policy and Data Processing Addendum.

This site does not use advertising, personalization, or social-media tracking cookies. Vercel Web Analytics does not set analytics cookies, and its script loads only after the consent described above. The consent preference below is used solely to remember and honor your choice. The remaining storage is used only for authentication, security, and session continuity requested by the user. These functional storage operations do not require additional consent under § 25(2) no. 2 TDDDG. Clearing browser storage may show the analytics prompt again, sign you out, or reset a security cooldown.

Account and profile data are kept while the account is used and until deletion is requested by email or the subscriber service is discontinued. Limited data may remain temporarily in backups or security records where necessary. Newsletter consent, withdrawal, and suppression records are kept only as long as needed to demonstrate compliance and respect an unsubscribe request, considering applicable limitation periods.

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability, and objection. Where processing is based on consent, you may withdraw it at any time for the future. To exercise these rights, email yz@yzyy.dev. This site does not use automated decision-making or profiling that produces legal or similarly significant effects.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible in Saarland is:

The website is delivered over encrypted HTTPS connections and uses reasonable technical and organizational security measures. This notice will be updated if the processing, service providers, or legal requirements materially change.