Privacy Policy
How this website handles data — in short: cookieless, self-hosted analytics, no third-party trackers, and all fonts, scripts and styles served from this domain.
Controller
The controller responsible for data processing on this website is:
Kakanat Shibin Devadas
Gilbert Str. 16, 22767 Hamburg, Germany
Email: shibinkidd@gmail.com
Full contact details are in the Imprint.
What we collect, and why
Server log files
When you visit this site, our server automatically records technical data that your browser transmits: the requested URL, date and time of access, the HTTP status and volume of data transferred, the referring page, and your browser and operating system. Your IP address is processed transiently to deliver the page and is not combined with other data to identify you.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable, correctly delivered pages). Logs are kept only as long as needed for operation and security.
Analytics — Umami (self-hosted, cookieless)
We use Umami, an open-source analytics tool that we host
ourselves on our own infrastructure (served from cdn.d34dman.com) — no data is sent
to a third-party analytics provider. Umami is cookieless: it sets no cookies and
stores nothing on your device, and it does not track you across websites. It
records aggregate, non-identifying metrics such as page views, referrer, approximate
region (derived from the IP address, which is not stored), and device/browser type.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding, in aggregate, how the site is used). Because no information is stored on or read from your device, no separate cookie consent is required. You can object at any time (see “Your rights” below); most browsers’ “Do Not Track” setting is also honoured by Umami.
Fonts, scripts and assets
All fonts, styles, scripts and images — including the web fonts, the maths renderer (MathJax) and chart library used on some posts — are served from this domain. We do not load Google Fonts, CDNs, or any other third-party resources as part of the site’s design, so simply visiting a page sends no data to external hosts.
Embedded media and external links
Individual posts occasionally embed external media (for example an audio or video player) or link out to other websites. Where a post embeds third-party media, loading that media may transmit data to the provider concerned; this happens only on the specific posts that use it, and the respective provider is responsible for its own processing. Plain hyperlinks do not transmit your data until you follow them.
Donations
The Support page links to donation profiles hosted by GitHub Sponsors (GitHub, Inc.) and Buy Me a Coffee (Coffee Labs Ltd.). Both are plain hyperlinks: no widget, sponsor button, script or asset from their servers is loaded on this website, so no data reaches either provider while you are here. If you follow a link and choose to donate, you leave this site and the transaction — including any payment and contact details — is handled entirely by that provider and its payment processors under their own privacy policy (GitHub, Buy Me a Coffee). We never receive or store your payment details. Note that GitHub Sponsors may list a sponsor publicly unless they choose to sponsor privately; that visibility is controlled in your GitHub account, not by us.
Contact by email
If you email us, we process your message and contact details solely to handle your enquiry (Art. 6(1)(b)/(f) GDPR) and retain them no longer than necessary.
Hosting
This site is served from a virtual server we operate ourselves, hosted by Hostinger in a data centre in Frankfurt am Main, Germany. The server processes the connection data needed to deliver pages (such as IP addresses in request logs) and runs our self-hosted Umami analytics described above.
Domain name resolution (DNS) for this site is provided by Nettigrity. Authoritative DNS answers name-resolution requests for the domain and does not receive data that identifies you individually.
International data transfers
Everything described above is processed on our server in Germany. We do not transfer your data outside the European Economic Area.
No transfer to third parties
We do not sell your data and do not share it with third parties for advertising. Data is disclosed only where legally required or to processors acting on our instructions (e.g. hosting) as described above.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17) and restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21); and
- lodge a complaint with a supervisory authority (Art. 77) — in Hamburg, the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.
To exercise any of these, email the controller above.
Changes to this policy
We may update this policy to reflect changes to the site or the law. The current version always lives at this URL; the date at the top shows when it last changed.
See also our Imprint.