Privacy policy
This policy describes how your data is handled when you visit davidmoothen.com. The goal is transparency and the strict minimum: this site does not try to track you.
1. Data controller
David Moothen, publishing this site as a personal endeavour.
Contact: [email protected]
2. Data collected
Two sources, exclusively technical, and nothing else.
- Server logs (via Hetzner hosting): IP address, browser user agent, request timestamp, requested URL. Retained for a maximum of 30 days, for security and technical diagnostics.
- Audience measurement (Umami, self-hosted): pages visited, approximate duration, referrer, device type. Statistics produced anonymously, with no cookie set on your browser, no cross-referencing with other processing, no transfer to third parties.
3. Purposes
Technical data is used to:
- Serve and secure the site (logs)
- Understand which articles interest readers, to inform future content (anonymous audience measurement)
4. Legal basis
The legitimate interest of the publisher (GDPR article 6.1.f) — providing and improving a public web service without surveillance of users.
Audience measurement is exempt from consent collection, in line with the French CNIL recommendation on cookies (strict anonymous configuration, no cookie, no cross-referencing, no third-party transfer).
5. Data recipients
No data is sold, sublicensed or shared with third parties.
The only technical recipients are:
- Hetzner Online GmbH (Germany, European Union) — hosting of the site and logs
- The Umami instance self-hosted by the publisher, on the same Hetzner infrastructure
6. Transfers outside the European Union
No data is transferred outside of the European Union. The entire infrastructure is located in Germany.
7. Retention period
Server logs are kept for a maximum of 30 days.
Umami statistics, anonymous by nature (no personally identifiable data), are retained indefinitely in aggregated form.
8. Cookies and trackers
No cookie is set on your browser when visiting this site.
No advertising tracker, no social media pixel, no third-party profiling script.
9. Your rights
Under GDPR and the French Data Protection Act, you have the following rights over your data:
- Right of access — know whether your data is processed and what is processed
- Right to rectification
- Right to erasure (under conditions)
- Right to restrict processing
- Right to data portability
- Right to object
- Right to lodge a complaint with the CNIL (https://www.cnil.fr)
10. Exercising your rights
For any question or request regarding your data, contact: [email protected]
A response will be provided within a maximum of one month.
11. Security
The site is served exclusively over HTTPS (TLS encryption).
Hetzner infrastructure applies standard physical and logical security measures for this type of service.
12. Changes to this policy
This policy may be updated to reflect changes to the site (e.g. adding a newsletter or comment system).
The date of the last update is shown at the bottom of the page.
Last updated: May 12, 2026
See also: Legal notice