$ cat privacy-policy.txt

// last updated: August 2026

$ cat controller.txt

1. Controller

Eduard Uffelmann · c/o Postflex #3764, Emsdettener Str. 10, 48268 Greven, Germany
VAT: DE360761854
Email: hello@uffelmann.me

$ cat cookies.txt

2. Cookies

This website does not use cookies.

$ cat server-logs.txt

3. Server logs

This site is hosted on Vercel. When you visit, Vercel automatically collects standard server log data — browser type, OS, referrer URL, IP address, access time, and ISP. This data is used for technical operation and security and is not attributed to individuals. Vercel's privacy policy: vercel.com/legal/privacy-policy.

$ cat analytics.txt

4. Web analytics

This site uses Umami, an open-source analytics tool I host myself on my own server — no data is shared with third parties. It sets no cookies and does not track you across websites. It records the page visited, the referrer, and coarse details derived from your browser and IP address — browser, OS, device type, and country — which are aggregated and never stored in a form that identifies you. IP addresses are not retained. Legal basis: Art. 6(1)(f) GDPR; the legitimate interest is understanding which content is read.

$ cat email-contact.txt

5. Email contact

If you contact me by email, your message and address will be stored solely to reply to your inquiry. Your data will not be passed on to third parties.

$ cat gdpr-rights.txt

6. Your rights (GDPR)

--accessrequest confirmation of whether your data is being processed
--rectificationrequest correction of inaccurate personal data
--erasurerequest deletion where there is no compelling reason for continued processing
--restrictionrequest that processing of your data be restricted
--portabilityreceive your data in a machine-readable format
--objectionobject to processing of your personal data

To exercise any of these rights, contact hello@uffelmann.me.

$ cat legal-basis.txt

7. Legal basis

Processing relies on Art. 6(1)(f) GDPR (legitimate interests — technical operation of the website) and Art. 6(1)(a) GDPR (consent) where applicable. No automated decision-making or profiling takes place.