Privacy

Controller

Ross Todd, Icking, Germany. Email rssmtdd@gmail.com. The full postal address is in the Impressum.

No analytics, no cookies, no tracking

There is no analytics platform, no tag manager, and no advertising or tracking script on this site. No cookies are set, so there is no consent banner, because there is nothing to consent to.

Choosing light or dark stores that preference in this browser’s local storage. The value is never transmitted, and choosing system removes it.

No third-party requests

Fonts are self-hosted and served from this domain rather than from a font CDN, so loading a page does not disclose your IP address to any third party. There are no embedded videos, maps, social widgets, or comment systems. Every page is a static file, and nothing on it requests anything from anyone but this domain.

Hosting and server logs

The site is served as static files by Vercel Inc.. Like any web server, theirs records standard access logs, which may include your IP address, the requested URL, the time of the request, and your browser’s user agent. Those logs exist for security and operational purposes on the legal basis of legitimate interest under Art. 6(1)(f) GDPR. I do not analyse them, export them, or combine them with anything else, and the retention period is the host’s own, because I neither control nor keep a separate copy.

Transfer outside the EU

Vercel Inc. is based in the USA, so serving a page to you can involve processing personal data outside the EU. That transfer rests on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission’s standard contractual clauses under Art. 46(2)(c) GDPR, together with a data processing agreement. The adequacy decision was upheld by the EU General Court in September 2025 and an appeal is pending before the Court of Justice, so this section is one of the few on the site with a live legal question behind it.

Contact

If you email me, I keep that correspondence in order to reply to it and for as long as the exchange is useful. I do not add it to any mailing list, because there is no mailing list.

Your rights

Under the GDPR you have the right to access, correct, or erase personal data held about you, to restrict or object to its processing, to data portability, and to lodge a complaint with a supervisory authority. Given that this site collects nothing, in practice this concerns only email correspondence you have chosen to send.

The competent authority for private-sector controllers in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Postfach 1349, 91504 Ansbach.