What gets recorded
Every request to this site is written to a standard web server access log. Each line contains:
- your IP address
- the date and time of the request
- the page or file requested, and the response status
- the referring page, if your browser sent one
- your browser's user-agent string
That's the whole list. Nothing is added to it, and nothing is combined with data from anywhere else.
Why an IP address counts
Under the GDPR an IP address is personal data, including a dynamic one, because an internet provider could in principle link it back to a person. That makes this a privacy notice rather than a formality, even though the site itself is about as inert as a website gets.
Why it's kept
Security, abuse prevention, and troubleshooting. Logs are how you find out that something is broken, or that a bot is probing for vulnerabilities — which, for the record, happens to every public host continuously. The legal basis is legitimate interest under Article 6(1)(f).
How long
30 days. Logs rotate daily and older ones are deleted automatically. There is no archive, no backup of them, and no long-term store.
What this site does not do
- No analytics. No Google Analytics, no Plausible, no pixels, no beacons.
- No tracking cookies. The site sets no cookies of its own — you can check the response headers yourself.
- No third-party embeds that would report your visit elsewhere. Fonts are served from this domain, not a font CDN.
- No advertising, no data sharing, no selling. There is nobody to share it with.
This is also why you are not being asked to dismiss a cookie banner. Consent banners exist because of the ePrivacy rules on storing or reading data on your device. This site does neither, so there is nothing to consent to.
Who else sees the traffic
The site sits behind Cloudflare, which serves it and shields the origin. Cloudflare therefore processes request data — including your IP — as a processor, under its own terms. It may set a __cf_bm cookie for bot detection; that is a security function rather than tracking, and it is Cloudflare's, not mine.
The server itself is self-hosted on a homelab machine. No other cloud provider is involved.
Your rights
You can ask what is held about you, ask for it to be deleted, or object to the processing. In practice, an IP address in a log is hard to tie to a person without more information than I have — so a request will usually need the IP and an approximate timestamp to find anything at all.
Email hello@jonasfiers.eu. If you are not satisfied, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).
Who is responsible
Jonas Fiers, Belgium. Contact: hello@jonasfiers.eu.
Changes
If what the site records ever changes, this page changes with it, and the date at the top moves. There is no changelog because there has been nothing to log.