Last updated: 22 October 2026
Privacy at a glance#
The short version: this website does not use cookies, tracking pixels, advertising or embedded third-party content. There are no comment or contact forms. To see which articles are read, I use the cookieless, privacy-friendly analytics service Umami, which does not build user profiles and does not track you across websites. Apart from that, the only personal data processed when you visit is the technical data your browser has to send to load a web page, such as your IP address. This data is processed by the hosting provider.
The rest of this page explains the details and your rights under the EU General Data Protection Regulation (GDPR).
Controller#
The controller responsible for data processing on this website is:
Email:
Hosting#
This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA.
When you visit this site, GitHub automatically collects technical data in server log files. This includes your IP address, the date and time of the request, the page requested, the referrer URL and your browser’s user agent. GitHub needs this data to deliver the site and to keep it secure, for example against attacks. I have no access to these log files and do not analyse them.
- Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is presenting this website reliably and securely.
- Transfer to third countries: GitHub, Inc. is based in the USA. GitHub is certified under the EU-U.S. Data Privacy Framework, and data transfers are additionally covered by GitHub’s Data Protection Agreement, which includes the EU Standard Contractual Clauses.
- More information: GitHub Privacy Statement
Domain and DNS#
The domain marvinrose.dev and its DNS records are managed by netcup GmbH, Emmy-Noether-Str. 10, 76131 Karlsruhe, Germany. When a browser looks up this domain, the DNS request is typically sent by your internet provider’s resolver rather than your own device. I have concluded a data processing agreement with netcup under Art. 28 GDPR.
Web analytics (Umami)#
To understand which articles are read and where readers come from, this website uses Umami Cloud, a privacy-friendly web analytics service operated by Umami Software, Inc. (doing business as Umami).
What is collected: the page you visit, the referring website, your browser, operating system and device type, your screen size, your language and your approximate country or region. Umami does not set cookies and does not use local storage for tracking. According to Umami, your IP address is processed only briefly to deliver the request, to derive an anonymised visitor identifier and to estimate your approximate location. It is not stored as part of the analytics records. No user profiles are created and you are not tracked across other websites.
Do Not Track: if your browser sends a “Do Not Track” signal, no analytics data is recorded.
- Purpose: statistical analysis of how this website is used, so I know which topics are useful and can improve the content.
- Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is anonymous usage statistics to improve this website.
- Data processing agreement: Umami processes this data on my behalf under its Data Processing Agreement in accordance with Art. 28 GDPR. Analytics data is stored in Umami’s EU region.
- More information: Umami Privacy Policy · Subprocessors
You can object to this processing at any time, for example by enabling “Do Not Track” in your browser or by using a content blocker.
Encryption#
This site is only available over an encrypted connection (TLS / HTTPS). You can recognise this by the lock icon in your browser’s address bar and the “https://” prefix.
Cookies, local storage and search#
This site does not set cookies. If you switch between light and dark mode, your choice is saved in your browser’s local storage so the site remembers it. This data never leaves your device and you can clear it at any time in your browser settings. The site search runs entirely in your browser. Your search terms are not sent anywhere.
Contacting me by email or social media#
If you contact me by email or via LinkedIn, I process the data you send me (such as your name, email address and message) solely to handle your request. I delete it once your request has been fully dealt with, unless legal retention obligations apply.
- Legal basis: Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering your request).
If you follow a link to LinkedIn or GitHub, the privacy policy of that provider applies from that point on.
Your rights#
Under the GDPR you have the right to:
- Access the personal data I hold about you (Art. 15)
- Rectification of incorrect data (Art. 16)
- Erasure of your data (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, with effect for the future (Art. 7(3))
To exercise any of these rights, contact me at the address above.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Storage period#
Unless a more specific storage period is stated above, personal data is kept only as long as it is needed for the purpose it was collected for, or until you ask me to delete it, unless statutory retention periods apply.
Changes to this policy#
I may update this policy when the site or the legal situation changes. The current version is always available on this page.