Privacy policy

The operator of this website, reachable at ff@4d49.io.

The website is hosted by Vercel Inc. (USA). When you open a page, the server processes your IP address, the date and time, the requested address, the referring page and your browser and device type. This is needed to deliver the site and to keep it secure (Art. 6(1)(f) GDPR, legitimate interest). Vercel keeps such logs for a limited time. Data can be transferred to the USA; Vercel relies on the EU-US Data Privacy Framework and standard contractual clauses for this.

I use Vercel Web Analytics to count page views and see roughly where visitors come from (country, referrer, browser type). It works without cookies and without storing an identifier on your device (Art. 6(1)(f) GDPR, legitimate interest in understanding how the site is used).

The website stores only what it needs to work: your light or dark theme choice and, if you open the 18+ gallery, a note that you confirmed your age (kept for 30 days). Nothing is used for tracking or advertising, and nothing is sent to a server. You can delete this data in your browser settings at any time.

Fonts are served from this website itself; your browser does not contact Google. Preview pictures of the portfolios come from my own photo server (pix.pup-spicy.eu) and are loaded through this website. If you click a gallery link, that server opens and processes your IP address in its access logs like any web server.

The line “Currently in …” and the journey card show public check-ins from my Träwelling account. They are fetched by the server; no data about you is sent to Träwelling.

The links to Instagram, X, Snapchat, Telegram, Bluesky, Discord and other services only take you there when you click them. From then on the privacy policy of that service applies.

The pages /admin and /tools are only for me. When someone tries to log in, failed attempts are counted per IP address in a hashed form for 15 minutes to block password guessing. After a successful login a session cookie is set; it is strictly necessary for the login.

If you write to ff@4d49.io, I process your message and your email address only to answer you (Art. 6(1)(b) or (f) GDPR) and delete it when the matter is settled, unless I am legally required to keep it.

The contact form works in two steps. When you submit it, your topic, name (optional), email address, optional link and message are kept temporarily on a database (Upstash, EU/USA) and a confirmation email is sent to the address you gave. Nothing reaches me yet. If you do not click the confirm button, the draft is deleted automatically after 24 hours. Once you confirm, the message is emailed to me and the draft is deleted at once. Emails are delivered by the service Resend (Resend, Inc., USA), which only transmits them.

To limit spam and abuse, a hidden form field is checked and the number of submissions per IP address and per email address is counted in hashed form for one hour. By ticking the box you confirm that you have read this section.

You have the right to access, correction, deletion, restriction of processing, data portability and objection (Art. 15–21 GDPR), and to withdraw a consent you gave. Write to ff@4d49.io for any of these. You can also complain to a data protection authority, for example in your country of residence.