Privacy

Last updated: 2026-08-03. Short and honest. No dark patterns, no advertising trackers, no cookies that aren't strictly necessary. Nothing loads from a third party unless you ask for it — see the section on video below.

Who is responsible

The data controller under Art. 4(7) GDPR is Florian van der Galiën. Postal address and contact details are listed in the imprint.

What we collect, and why

Server logs. When you visit, our host (Cloudflare) records your IP address, user-agent, referrer, requested URL and timestamp. These are used only to operate the site and defend against abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in running a secure service). Retention: logs are retained by Cloudflare for up to 7 days, then deleted automatically.

Analytics. We run a self-hosted Plausible instance at plausible.flori.cloud. We operate Plausible ourselves under the same data controller as this site; Hetzner provides only the underlying server infrastructure as our processor. Plausible doesn't use cookies, doesn't fingerprint, doesn't track you across sites, and doesn't store personal identifiers. Per visit we record: page URL, referrer, anonymized country, browser and OS, plus a daily-rotating hash that can't be linked across days. We also count one custom event, Signup, when the waitlist form is submitted — a bare counter with no properties attached and no link to your email address or to any other event. Aggregate counters are kept indefinitely — they are page- and referrer-level totals that identify no one; the daily hash is rotated every 24 hours and cannot be reconstructed afterwards. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate traffic) in combination with § 25 Abs. 2 Nr. 2 TDDDG — no information is stored on your terminal device, and the script is strictly necessary to operate aggregate audience measurement for the requested service.

Video. Videos on this site are hosted by Bunny (BunnyWay d.o.o., Slovenia) and sit behind a click-to-load placeholder. The player itself — the on-page video player and the code that plays the stream — is served from this site, and the preview image you see before playing is a local still, not Bunny's. Until you press play, your browser contacts no Bunny server at all and no cookie or local storage entry is created.

When you press play, the video is streamed directly from Bunny's delivery network — hostnames under b-cdn.net, and nothing else. The player interface and the software that plays the stream are both served from this site, so playing a video adds no request to any other Bunny service. The streaming requests transmit your IP address, user-agent and referrer to Bunny, and Bunny derives aggregate viewing statistics, such as watch time and drop-off, from them. Playing a video sets no cookies and writes nothing to your browser's local storage: the player only saves playback preferences such as volume and resume position when that storage is explicitly enabled, and we do not enable it. The one exception is settings you change yourself in the player's own menu — caption styling and its accessibility toggles — which are kept as local storage entries on your device so they hold for the next video (§ 25(2) TDDDG; stored at your request, readable by no one but your browser). Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, given by the deliberate act of pressing play. Each video is gated separately, and withholding consent costs you nothing else — every part of the site except the video itself works without it.

Newsletter signup. If you submit your email via the waitlist form, we use the double-opt-in procedure: you receive a confirmation message, and we only add you to the list once you open the link in it and press the confirm button on the page it leads to. Opening the link on its own changes nothing, so a mail scanner or link preview cannot confirm on your behalf. We log the timestamps, the version of the consent text and where the form was submitted as proof of consent (Art. 7(1) GDPR). Withdrawal is logged in the same record. The waitlist database does not retain your IP address. These records are stored in Cloudflare D1 with data residency in the European Union.

Before a submission is accepted, a self-hosted Cap check asks your browser to perform a small proof-of-work calculation and runs short-lived browser instrumentation. The widget, WebAssembly module, challenge generation and verification are all served by this site; Cap sets no cookies and sends nothing to a third party. This protects the confirmation endpoint from being used to send unwanted mail. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse). If an address is not confirmed, its record is deleted no later than seven days after the 24-hour confirmation link expires. Confirmed records are retained until you unsubscribe, plus up to three years thereafter to evidence consent under the regular limitation period (§ 195 BGB). You can withdraw at any time by replying "unsubscribe" or using the link in any newsletter — withdrawal does not affect the lawfulness of processing before withdrawal (Art. 7(3) GDPR).

Who we share it with

• Hetzner Online GmbH — server infrastructure for our self-hosted Plausible analytics instance. Hetzner is based in Germany, and the analytics server is located in Germany, so this hosting does not involve a transfer to a third country.
• Cloudflare, Inc. — hosting, CDN, edge logs and the waitlist database. Waitlist records are stored in Cloudflare D1 with EU data residency. Cloudflare is a US company, and some processing or support may still involve transfers to the US. These transfers are based on the EU-U.S. Data Privacy Framework adequacy decision (Art. 45 GDPR); the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) apply as a fallback. A data processing agreement under Art. 28 GDPR is in place.
• BunnyWay d.o.o. (bunny.net) — video hosting and delivery, and only once you have pressed play. Slovenian company; storage and delivery are confined to locations inside the EU, so no transfer to a third country takes place and neither an adequacy decision nor Standard Contractual Clauses are required. A data processing agreement under Art. 28 GDPR is in place.
• Resend (resend.com) — confirmation and newsletter delivery, including the managed unsubscribe page. The production sending domain is configured in Resend's Ireland region (eu-west-1). Resend is a US company. Transfers are based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR), with SCCs (Art. 46(2)(c) GDPR) as a fallback. A data processing agreement under Art. 28 GDPR is in place.

That's the entire list. No ad networks, no fingerprinting, no cross-site tracking, no cookies that aren't strictly necessary.

Your rights

Under the GDPR you can ask us to access, correct, erase, restrict, port or object to the processing of your personal data (Art. 15–21). You can withdraw consent at any time (Art. 7(3)). Email the address in the imprint and we'll reply within 30 days.

You also have the right to lodge a complaint with a data protection authority (Art. 77 GDPR) — for example, the supervisory authority of the German federal state where you live or work.

Data protection officer. No DPO is designated. The thresholds of § 38 BDSG (twenty or more persons regularly engaged in automated processing, large-scale processing of special categories, etc.) are not met for this site.

Automated decision-making. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

Changes

If we materially change how data is processed, this page is updated and the date at the top is bumped. Older versions live in git history.