Privacy Policy / Datenschutzerklarung

This is a personal blog and portfolio website. I take your privacy seriously. This policy explains what data is collected when you visit this site, why, and what your rights are.

This policy is provided in English. If you require a German version, please contact me. The applicable law is the EU General Data Protection Regulation (GDPR / DSGVO) and the German Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG, formerly TTDSG).

Last updated: April 2026

1. Controller

The controller responsible for data processing on this website (njannasch.dev) and vibecockpit.dev is:

Nils Jannasch

Manteuffelstr. 9

44143 Dortmund

Germany

E-Mail: contact@njannasch.dev

2. Hosting

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit this site, Cloudflare processes connection data (IP address, date, time, browser type, referring URL) to deliver the pages to you. This is necessary for the operation of the website.

Cloudflare is certified under the EU-US Data Privacy Framework. For more information, see the Cloudflare Privacy Policy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the website).

3. What this site does NOT do

• No cookies are set
• No user accounts or logins
• No newsletter or email collection
• No contact forms
• No advertising or tracking pixels
• No cross-site or cross-device tracking
• No personal data is stored that could identify individual visitors
• No data is sold or shared with third parties

4. Web Analytics

4.1 Counterscale (Self-Hosted)

This website and vibecockpit.dev use Counterscale, a self-hosted, open-source web analytics tool. It runs on a Cloudflare Worker under my control. Counterscale:

• Does not use cookies or browser fingerprinting
• Does not collect or store IP addresses
• Does not track users across websites
• Does not collect personal data

The following anonymized data is collected per page view: page URL, referrer URL, country (derived from Cloudflare's edge location, not from IP geolocation), browser type, device type, and screen size. No data is stored that could identify individual visitors. Analytics data is retained for 90 days.

No consent banner is required because no cookies or personal data are involved (TDDDG Section 25; GDPR Recital 47).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding website usage to improve content).

4.2 Cloudflare Web Analytics

This website additionally uses Cloudflare Web Analytics, a privacy-focused analytics service provided by Cloudflare, Inc. It operates under the same privacy principles: no cookies, no personal data, no cross-site tracking. It collects only aggregated metrics such as page views, referrers, and browser types.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding website usage).

5. External Links

Blog posts may contain links to external websites (GitHub, LinkedIn, HuggingFace, research papers, etc.). When you click an external link, you leave this website and the privacy policy of the external site applies. I have no control over the data processing of external websites.

6. RSS Feed

This website offers an RSS feed at /rss.xml. Using the RSS feed does not require providing any personal data. Your RSS reader connects to the server to fetch the feed. The same hosting provisions (Section 2) apply.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data. Since this website does not collect or store personal data that could identify you, most of these rights are not practically applicable. However, they are listed here for completeness:

• Right of access (Art. 15 GDPR): You can request information about whether personal data concerning you is being processed.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): You can request that processing of your data be restricted.
• Right to data portability (Art. 20 GDPR): You can request to receive your data in a machine-readable format.
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interest at any time.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for North Rhine-Westphalia is the Landesbeauftragte fur Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

To exercise any of these rights, contact me at contact@njannasch.dev.

8. Data Retention

Counterscale analytics data is retained for 90 days and then automatically deleted. Cloudflare server logs are retained according to Cloudflare's retention policy. No other personal data is stored.

9. Automated Decision-Making

This website does not use automated decision-making or profiling.

10. Changes to This Policy

I may update this privacy policy from time to time. The "last updated" date at the top reflects the most recent revision. Significant changes will be noted on the website.