How this site handles your data
This is a static blog. The only processing on top of plain hosting is a self-hosted, cookieless analytics setup (Umami) for aggregate visit counts. There are no tracking cookies, no third-party embeds that profile you, and no contact form. The notes below describe what data nonetheless touches this site, and what your GDPR rights are.
The site is served as static files from a hosting provider. Like any web server, the host writes short-lived access logs (IP address, timestamp, requested URL, user agent, referrer). These logs are processed under Art. 6 (1) (f) GDPR for the legitimate interest of operating a stable site and detecting abuse, and are rotated/deleted on the provider’s standard schedule. They are not joined with any other dataset and are not used for advertising or profiling.
I run a self-hosted instance of Umami — a privacy-friendly, open-source analytics tool — on a server in the EU to see aggregate page views and referrers. Umami does not set cookies and stores nothing in your browser. Per visit, it briefly processes a hash derived from your IP address, user agent, and a daily-rotated salt to count unique sessions; the IP itself is not stored, and the hash cannot be reversed or linked across days. No personal data, no cross-site tracking, no profiling. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in understanding how the site is used). Because nothing is stored on your device, no consent under § 25 TTDSG is required. You can opt out at any time via your browser’s Do-Not-Track setting or a content blocker.
The site does not set tracking or analytics cookies. Your browser may, on its own, store standard items such as cache entries — these are technical and not under my control.
If you write to the email address listed in the Legal Notice, your message and address are processed under Art. 6 (1) (f) GDPR (legitimate interest in answering inbound contact) or, if your message concerns a contract, Art. 6 (1) (b). Messages are kept only as long as needed to handle the conversation.
Under the GDPR you have the right to information (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). You may also lodge a complaint with a supervisory authority — for Saarland, the Unabhängiges Datenschutzzentrum Saarland in Saarbrücken.
Reach me at reza@esmaili.info