Privacy Policy
How this website handles your data, under the GDPR
The short version
This site sets no cookies, runs no analytics, embeds no tracking pixels, and loads no fonts, scripts or images from third-party servers. Nothing you do here is profiled or passed on for advertising. The only thing you can actively send me is the contact form, and what happens to that is described below.
Controller
Server log files
When you open this site, your browser automatically transmits technical data that my hosting provider records in server log files:
- the page requested and the time of the request
- the amount of data transferred and whether the request succeeded
- browser type and version, operating system and referring URL
- your IP address
This data is not merged with other sources and is not used to identify you personally. It is processed on the basis of Art. 6(1)(f) GDPR: I have a legitimate interest in delivering the site reliably and in detecting technical faults and attacks. The logs are deleted by the hosting provider after a short retention period.
Hosting
This site is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Hostinger processes the log data described above on my behalf as a processor under Art. 28 GDPR.
Contact form
If you use the contact form, the following is processed:
- the name, email address, subject and message text you enter
- your IP address and the time of submission, which are included in the email I receive
This data is used to answer your enquiry and for nothing else. It is not passed to third parties, not used for advertising, and there is no newsletter. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or a pre-contractual request, and otherwise Art. 6(1)(f) GDPR based on my legitimate interest in answering enquiries. The resulting email correspondence is kept for as long as it is needed to deal with your request, or as long as statutory retention periods require.
To keep the form from being abused by spam bots, the number of messages sent from one IP address is limited to five per hour. For that purpose an irreversible hash of your IP address, together with the times of successful submissions, is stored on the server for one hour and then expires. The hash cannot be turned back into your IP address. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in protecting the form.
The form submits to my own server and sends the message through my mail provider, Hostinger, acting as a processor. Nothing is loaded from third-party services while you fill it in, and the page sets no cookies.
Contact by email
If you write to me, your email address and the content of your message are stored so that I can answer you and handle any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or a pre-contractual request, and otherwise Art. 6(1)(f) GDPR based on my legitimate interest in answering enquiries. I keep this correspondence for as long as it is needed, or as long as statutory retention periods require, and I do not pass it on to third parties.
Email is delivered through my mail provider, Hostinger, acting as a processor.
Links to other sites
This site links to external services, in particular my store at itch.io and my freelance profiles at Fiverr and Upwork. Those links are plain links: nothing is loaded from those services while you are on this page, and no data is sent to them until you click. Once you follow a link, the privacy policy of the site you land on applies, not this one.
Your rights
Under the GDPR you have the right to obtain information about the personal data I hold about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). To exercise any of these, write to the address above.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for me is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover.
SSL encryption
This site uses HTTPS, so the connection between your browser and the server is encrypted in transit.
Changes
If the site ever gains a feature that processes data differently, this policy will be updated before that feature goes live.