Privacy

This is a personal blog. I run it myself, and my contact details are on my personal website.

No cookies, no accounts, no comments, no ads, no embeds. The one thing this site puts on your device is your scroll position, so a page you go back to opens where you left it. Your browser keeps it until you close the tab and it never leaves your machine, so there is no consent banner.

What is collected

I run my own umami instance, hosted on Vercel and served from this domain, so your browser never talks to an analytics vendor. It records which page you looked at, where you came from, your browser, operating system, device, screen size and language, and your country, sometimes also the region and city. Visits are grouped by a number hashed from your IP address and browser string. Your IP address is not stored, and nothing here is tied to a name or an account.

The legal basis is legitimate interest: I want to know whether anything here gets read. I keep records for up to 12 months.

Vercel hosts both the blog and that umami instance, and keeps its own server logs, including IP addresses, under its privacy policy. The umami instance runs in the United States, so the measurements leave the EU as well as the logs. The transfer rests on Vercel’s certification under the EU-US Data Privacy Framework.

Your rights

You can ask what is stored about you, have it corrected, deleted or restricted, or complain to a data protection authority. You can object to the processing at any time, and I will stop it. In practice I cannot look you up, because nothing stored here carries a name.

To stop the recording for your own visits, turn on Do Not Track. The script honours it. You can also block /stats/script.js, though it is served from this domain, so most blocklists miss it and you would need your own filter rule. The blog reads the same either way.