Privacy Policy
This site sets no cookies, runs no forms and ships no tracking code of its own. What it does have is server logs and a cookieless analytics beacon Cloudflare adds at the edge. What follows is the complete list.
Last updated 22 August 2026.
Who is responsible
Gerhard Reus, Platzl 1, 5020 Salzburg, Austria. Contact:[email protected]. Full details are in theimprint.
Cookies
This site sets none, and nothing it loads sets one either. There is no consent banner because there is nothing to consent to.
Server logs
The web server records each request: the IP address, the time, the page requested, the referring page and the browser's user agent. That is standard for any web server and is needed to operate the site securely. The legal basis is legitimate interest under Article 6(1)(f) GDPR. Logs are not used to build a profile and are not combined with anything else. They are rotated by the host and are not kept beyond 30 days.
The site is hosted on a Hetzner server in Germany, managed through xCloud, and is served through Cloudflare, which acts as a caching and security proxy. Both process request data on the way to the server, and both act as processors. Cloudflare, Inc. is based in the United States, so some of that processing happens outside the EEA under Cloudflare's own data processing terms and the European Commission's standard contractual clauses.
Analytics
Google Analytics used to run here. It was removed when the site moved off WordPress and replaced with Cloudflare Web Analytics, which is cookieless, sets no persistent identifier and does not follow visitors between sites. It reports aggregate page views and referrers, nothing that identifies a person. Legal basis: legitimate interest under Article 6(1)(f) GDPR.
Cloudflare injects its beacon into the page at the edge rather than it being part of what is published here, so the script the browser fetches comes from static.cloudflareinsights.com. It is the only script on the site that is not served from this domain.
Fonts, images and embeds
Fonts are served from this domain, not from Google Fonts or any other font service. Images are served from this domain. There are no embedded videos, maps, social widgets, comment systems or tracking pixels anywhere on the site. Apart from the analytics beacon, every file the browser loads comes from this domain.
Contact by email
There is no contact form. If you write to the address above, your message and your address are used to answer you and nothing else (Article 6(1)(b) or (f) GDPR), and are kept as long as the exchange requires or the law demands. You are not obliged to write, and nothing on this site depends on your doing so.
Personal data inside older posts
Posts published between 2017 and 2020 are archive material and some of them quote other people, including messages sent privately at the time. If something published here concerns you and you would like it removed or anonymised, write to the address above and it will be taken down.
Your rights
Under the GDPR you may request access to your personal data, correction, erasure, restriction of processing, and data portability, and you may object to processing based on legitimate interest. Write to the address above. You may also complain to the Austrian Data Protection Authority, the Datenschutzbehörde, atdsb.gv.at.
Changes
This page describes the site as it currently is. If something is added that processes data, this page is updated at the same time and the date at the top changes with it.