Privacy

Privacy

This is a personal portfolio site. It has no accounts, no newsletter, no comments, no contact form, and no shop. There is very little to say here, and what follows is all of it.

Last updated: 24 August 2026

Who is responsible

This site is operated by Philipp Mieden as a natural person, at Amsterdam, the Netherlands. It is not operated by, and does not share data with, Amsterdam Technologies B.V. or any other company.

Contact for any data protection question: dreadl0ck [at] protonmail [dot] ch

Server logs

The web server records each request: IP address, browser and operating system, the referring URL, the requested URL, the response status, and the time. An IP address is personal data, so this is worth stating plainly rather than claiming the data is anonymous.

The basis is legitimate interest (Art. 6(1)(f) GDPR) in keeping the site running and diagnosing faults. The logs are not used for advertising, are not profiled, and are not combined with anything else.

Retention: 30 days, then deleted.

Analytics

The site loads a small script from analytics.dreadl0ck.net, a Shynet instance I host myself. It counts page views so I can see which writing is read. No third party receives the data and it is never sold or shared.

The basis is legitimate interest (Art. 6(1)(f) GDPR). Shynet honours the Do Not Track browser setting — if you send DNT, you are not counted. You can also block the script outright; nothing on the site depends on it.

What this site does not do

  • No cookies. None are set, so there is no cookie banner to click.
  • No third-party trackers. No Google Analytics, no Meta pixel, no ad network.
  • No fonts or scripts loaded from third-party CDNs, so no data leaves the EU on page load.
  • No newsletter and no mailing list. Nothing to unsubscribe from.
  • No accounts, no profiling, no automated decision-making.

Where the data is

The server is hosted with Hetzner Online GmbH in Germany. Logs and analytics stay on that infrastructure, inside the EU.

Your rights

Under the GDPR you can ask for access to your data, its correction or erasure, restriction of processing, and portability, and you can object to processing based on legitimate interest — which here means the logs and the analytics. Email the address above and I will answer within one month.

You can also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (Postbus 93374, 2509 AJ Den Haag, autoriteitpersoonsgegevens.nl).

Changes

If any of the above changes, this page changes with it and the date at the top is updated.