Privacy policy.

Who runs this site

Michael Steurer, South Tyrol, Italy. This is my personal website, and I'm the controller for the data described here under the GDPR. Write to me at hello@mich312.com.

This policy covers mich312.dev only. My other sites and apps have their own.

Hosting

The site is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When your browser asks for a page, Cloudflare receives what every web request carries: your IP address, the address you asked for, the time, your browser's user agent and the page you came from. It needs that to deliver the page and to keep attacks off the site, and may keep it in its logs for a short time. I don't get those logs and don't build anything from them.

Cloudflare processes this for me under its data processing addendum and is certified under the EU–U.S. Data Privacy Framework, since some of it may be handled outside the EU. The legal basis is my legitimate interest in a site that loads and stays secure (Art. 6(1)(f) GDPR). Details: Cloudflare's privacy policy.

Private field notes

A few field notes are only for people I've invited. That part of the site (/field-notes/circle/) sits behind Cloudflare Access. To get in you enter your email address, Cloudflare checks it against my list and sends you a one-time code. Once you're in, it sets a cookie, CF_Authorization, that keeps you signed in. Cloudflare logs sign-ins, and I can see those logs, including the email address used.

That cookie only exists in this section and only after you sign in. The legal basis is my legitimate interest in keeping those notes to the people they're meant for (Art. 6(1)(f) GDPR).

Daylight

If you press “your location” on Daylight, your browser asks whether to share it. If you say yes, the coordinates are used in your browser for the calculations and go nowhere else, not to me and not to anyone else.

The language you pick there is saved in your browser's local storage (mich312:daylight:lang), so the page opens in that language next time. Nothing is sent anywhere, and you can clear it in your browser's settings. Since it only stores a choice you made, there's no consent banner for it.

Email

If you write to me, I get your address and whatever you write, and use them to answer. I keep the conversation as long as it's useful to both of us, and delete it if you ask.

Links to other sites

The site links to Mastodon, GitHub, the App Store and my other projects. Nothing from them loads until you click. Once you're there, their privacy policies apply.

Your rights

You can ask what I have about you, and have it corrected, deleted, restricted or handed over, and you can object to processing (Art. 15–21 GDPR). Email me and I'll sort it out. You can also complain to a data protection authority: in Italy that's the Garante per la protezione dei dati personali, or the one where you live or work.