Privacy policy

David Moothen, publishing this site as a personal endeavour.

Contact: [email protected]

The following data is collected. The first two are technical and automatic; the third only exists if you choose to subscribe to the newsletter.

• Server logs (via Hetzner hosting): IP address, browser user agent, request timestamp, requested URL. Retained for a maximum of 30 days, for security and technical diagnostics.
• Audience measurement (Umami, self-hosted): pages visited, approximate duration, referrer, device type. Statistics produced anonymously, with no cookie set on your browser, no cross-referencing with other processing, no transfer to third parties.
• Newsletter subscription (optional): your email address, your first name if you provide it, plus the date and status of your subscription (confirmed or pending). When you submit the form, your IP address is used transiently server-side to prevent abuse (anti-spam); it is not retained for that purpose.

Data is used to:

• Serve and secure the site (logs)
• Understand which articles interest readers, to inform future content (anonymous audience measurement)
• Send you the newsletter (notification of new articles), only if you have consented

For logs and audience measurement: the legitimate interest of the publisher (GDPR article 6.1.f) — providing and improving a public web service without surveillance of users. Audience measurement is exempt from consent collection, in line with the French CNIL recommendation on cookies (strict anonymous configuration, no cookie, no cross-referencing, no third-party transfer).

For the newsletter: your consent (GDPR article 6.1.a), collected via a dedicated checkbox and confirmed by a validation email (double opt-in). You can withdraw it at any time (see “Your rights”).

No data is sold or shared for commercial purposes. The only recipients are technical providers acting as processors under the GDPR:

• Hetzner Online GmbH (Germany, European Union) — hosting of the site and logs
• The Umami instance self-hosted by the publisher, on the same Hetzner infrastructure
• Listmonk, a newsletter manager self-hosted by the publisher on Hetzner infrastructure (European Union) — storage of subscriber addresses
• Amazon Web Services (Amazon SES) — delivery of newsletter emails, region Europe (Paris, eu-west-3): emails are processed on servers located in France. AWS acts as a processor, governed by a Data Processing Agreement (DPA).

Logs, audience measurement and subscriber management (Listmonk) remain within the European Union (Germany). Newsletter emails are sent via Amazon SES from the Europe (Paris, eu-west-3) region: data is processed on servers located in France.

As Amazon Web Services is a US-incorporated company, this reliance is governed by Standard Contractual Clauses and the EU–US Data Privacy Framework. No data is stored outside the European Union as part of these services.

Server logs are kept for a maximum of 30 days.

Umami statistics, anonymous by nature (no personally identifiable data), are retained indefinitely in aggregated form.

Newsletter subscription data is kept for as long as you remain subscribed. When you unsubscribe, it is deleted or anonymised within a reasonable period. Proof of your consent is kept for as long as necessary to meet legal obligations.

No cookie is set on your browser when visiting this site.

No advertising tracker, no social media pixel, no third-party profiling script.

Under GDPR and the French Data Protection Act, you have the following rights over your data:

• Right of access — know whether your data is processed and what is processed
• Right to rectification
• Right to erasure (under conditions)
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent at any time (newsletter), without affecting the lawfulness of processing carried out before withdrawal
• Right to lodge a complaint with the CNIL (https://www.cnil.fr)

For any question or request regarding your data, contact: [email protected]

For the newsletter, you can unsubscribe at any time via the link at the bottom of every email — it is instant and requires no justification.

A response will be provided within a maximum of one month.

The site is served exclusively over HTTPS (TLS encryption).

Hetzner infrastructure applies standard physical and logical security measures for this type of service.

This policy may be updated to reflect changes to the site (e.g. adding a newsletter or comment system).

The date of the last update is shown at the bottom of the page.