Privacy policy

Who we are

Splintist (splintist.com) is operated by Thomas Neumann. This site is the data controller within the meaning of Art. 4(7) GDPR. The full postal address and contact details are on the imprint page. Splintist is a read-only personal blog. There are no user accounts, no login, no contact or sign-up forms, and no visitor database.

What we collect

When you visit the site, the hosting server records standard access logs. Each entry may contain your IP address, the date and time of the request, the requested page, the referring page, and your browser's user-agent string. These logs are used only to operate and secure the service (for example, to diagnose faults and to detect abuse). Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a stable and secure website. Logs are kept only for a short period (roughly 30 days) and are then deleted or anonymized.

Analytics

We measure aggregate usage with Umami, a privacy-friendly analytics tool we self-host on our own server, so the data never leaves our infrastructure and is never shared with or sold to anyone. Umami sets no cookies and stores no personal data: it records aggregate events only (page visited, referring site, approximate country, browser/device type, timestamp). To count unique visits it derives a daily-rotating, one-way hash from your IP address and user-agent and then discards the IP. The hash resets every day, so there is no persistent identifier and no way to recognize you across days or across sites.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in understanding, securing, and improving the site. Because nothing is stored on or read from your device, no consent banner is required under § 25 (2) TDDDG. We also honor your browser's Do-Not-Track setting: if it is enabled, no analytics event is recorded at all.

Cookies

This site sets no cookies of its own. It has no login sessions and stores nothing on your device for its own function. Our analytics (Umami) is cookieless. No consent banner is shown because there is nothing optional to consent to.

Comments

Should a comment feature be enabled on the blog, and only if you choose to leave a comment, we process the content of your comment together with any name or handle you choose to enter. Providing a name is optional; you may comment under a pseudonym. The comment and its associated data are stored on our own server (see Hosting below) so that the comment can be displayed beneath the relevant post.

Legal basis: Art. 6(1)(a) GDPR (your consent, given by submitting the comment) and Art. 6(1)(f) GDPR (our legitimate interest in discussion and in preventing spam and abuse). You are responsible for the content you submit; please do not post personal data of other people without their permission. You can ask us to delete a comment at any time using the contact details below. If no comment feature is active on the site, no such data is collected.

Hosting

The site is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes the data described above on our behalf as a processor under a data-processing agreement (AVV) pursuant to Art. 28 GDPR. The servers are located in Germany.

What we don't collect

No accounts, no email or newsletter collection, no payment data. No third-party or cross-site tracking, no Google services, no advertising cookies, no data brokers, and no fingerprinting. Our analytics is self-hosted and cookieless (see Analytics above).

Your rights under the GDPR

Under Articles 15–21 GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise any of these rights, email hello@splintist.com.

You also have the right to lodge a complaint with a supervisory authority. The authority competent for this site is the Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit (datenschutz-hamburg.de).

Changes to this policy

This policy may be updated as the site evolves. The "Last updated" date at the top of the page reflects the most recent change.