Privacy

Privacy

This is a personal portfolio site. It has no accounts, no newsletter, no comments, no contact form, and no shop. There is very little to say here, and what follows is all of it.

Last updated: 24 August 2026

Who is responsible

This site is operated by Philipp Mieden as a natural person, at Amsterdam, the Netherlands. It is not operated by, and does not share data with, Amsterdam Technologies B.V. or any other company.

Contact for any data protection question: dreadl0ck [at] protonmail [dot] ch

Server logs

The web server records each request: IP address, browser and operating system, the referring URL, the requested URL, the response status, and the time. An IP address is personal data, so this is worth stating plainly rather than claiming the data is anonymous.

The basis is legitimate interest (Art. 6(1)(f) GDPR) in keeping the site running and diagnosing faults. The logs are not used for advertising, are not profiled, and are not combined with anything else.

Retention: 30 days, then deleted.

Analytics

The site loads a small script from analytics.amsterdam-technologies.com, a self-hosted analytics instance operated by Amsterdam Technologies B.V. on shared infrastructure. It counts page views so I can see which writing is read. No third party receives the data and it is never sold or shared.

No cookie is set and your IP address is not stored. The IP is used only to derive an approximate country and a short-lived visit identifier, and is discarded; what is kept is the page, the referrer, and coarse browser, device and country information. Nothing records what you type, and no session recording is enabled.

Page addresses are kept without their query string, apart from campaign labels (utm_*) and a marker recording that a visit came from an advertisement. Anything else in a link is discarded.

The basis is legitimate interest (Art. 6(1)(f) GDPR). You can object to it at any time under Art. 21 by writing to the address above, and I will stop. You can also block the script outright; nothing on the site depends on it.

What this site does not do

  • No cookies. None are set, so there is no cookie banner to click.
  • No third-party trackers. No Google Analytics, no Meta pixel, no ad network.
  • No fonts or scripts loaded from third-party CDNs, so no data leaves the EU on page load.
  • No newsletter and no mailing list. Nothing to unsubscribe from.
  • No accounts, no profiling, no automated decision-making.

Where the data is

The server is hosted with Hetzner Online GmbH in Germany. Logs and analytics stay on that infrastructure, inside the EU.

Your rights

Under the GDPR you can ask for access to your data, its correction or erasure, restriction of processing, and portability, and you can object to processing based on legitimate interest — which here means the logs and the analytics. Email the address above and I will answer within one month.

You can also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (Postbus 93374, 2509 AJ Den Haag, autoriteitpersoonsgegevens.nl).

Changes

If any of the above changes, this page changes with it and the date at the top is updated.