Legal
Privacy
The short version: this site sets no cookies, embeds no third-party services and does not analyse visitor behaviour. There are no forms and no accounts. What the server logs technically is described below.
Who is responsible
The controller under the GDPR is the operator of this site, reachable at maybecode@proton.me . This is a private, non-commercial portfolio; no services are offered and nothing is sold here.
No cookies, no tracking
No cookies are set and no analytics, advertising or tracking tools are used. That is also why you will not see a consent banner: there is nothing to consent to.
The only thing stored locally in your browser is your choice between the
light and dark colour scheme. It lives in the browser's
localStorage, never leaves your device, and can be cleared at any
time through your browser settings.
No third-party embeds
Fonts, images, styles and scripts are served exclusively from this site's own server. Opening a page therefore establishes no connection to third parties such as font or content delivery networks that could record your IP address along the way.
Links that explicitly point elsewhere — to GitHub, for instance — are the exception. They are only contacted once you click them, and from that point the privacy notice of that provider applies.
Server logs
When a page is requested, your browser transmits technically necessary data that the hosting provider may log briefly: IP address, timestamp, the address requested, the browser identifier and the amount of data transferred. This processing is necessary to operate and secure the site; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning service). This data is not combined with other sources and not evaluated for advertising.
Getting in touch by email
Writing to me transmits your sender address and the content of your message. That data is used solely to handle your enquiry (Art. 6(1)(b) and (f) GDPR), is not passed on, and is deleted once it is no longer needed.
Your rights
- Access to the data held about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR)
Encryption
The site is served over HTTPS only. Requests made over HTTP are redirected to the encrypted connection.