We process as little data as possible.

Hosting & server logs

This website is served via Netlify (Netlify, Inc., USA). When you access it, the hosting provider automatically processes technical access data (incl. a shortened IP address, date and time, the address requested, the browser used). This data is technically necessary to deliver the site and ensure its stability and security. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). For the transfer to the USA we rely on the EU Commission's standard contractual clauses.

Cookies

We use only technically necessary cookies — no tracking or marketing cookies. That's why there is no cookie banner. Specifically:

• dpat-entered — remembers that you confirmed the notice on your first visit, so it doesn't reappear every time.
• dpat-vnr — stores your (anonymous) visitor number, so the visitor counter doesn't count up again on a return visit. Only a small number is stored, no personal data.

The legal basis is § 25 (2) TTDSG (technically necessary storage) or our legitimate interest (Art. 6(1)(f) GDPR).

Visitor counter

We count the number of visits as a plain total (a value that counts up). No IP addresses and no personal data are stored — only the anonymous number in your browser mentioned above, plus a total counter on our server.

Wall & guestbook

When you leave an entry on the wall, we process the data you voluntarily provide: a name (a nickname is enough), your message and optionally an image. After a review by us, this content is displayed publicly on the site. Please don't provide any sensitive personal data there, and only upload images to which you hold the necessary rights and on which no people are identifiable without their consent.

Before uploading, images are resized in your browser and metadata (e.g. EXIF location data) is removed. Storage takes place on our own server at Hetzner (Hetzner Online GmbH, Germany). The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting. You can request the deletion of your entry at any time, informally by e-mail.

Spam protection (Cloudflare Turnstile)

To protect our forms against automated abuse, we use Cloudflare Turnstile (Cloudflare, Inc., USA) — a data-minimising alternative to classic captchas. In the process, technical data (incl. IP address and browser information) is transmitted to Cloudflare to check whether the request comes from a human. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR).

Your rights

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You can withdraw any consent you've given at any time with effect for the future. Just contact hi@dont-post-about-this.de.

You also have the right to lodge a complaint with a data protection supervisory authority — for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, who is responsible for us.

Encryption

This site and the data transfer to our backend take place exclusively encrypted via HTTPS (TLS).