What gets recorded
Every request to this site is written to a standard web server access log. Each line contains:
- your IP address
- the date and time of the request
- the page or file requested, and the response status
- the referring page, if your browser sent one
- your browser's user-agent string
That's the whole list. Nothing is added to it, and nothing is combined with data from anywhere else.
Separately, addresses that behave abusively are sometimes blocked automatically for a while. If that happens, the blocked address and the time of the block are logged too.
Why an IP address counts
Under the GDPR an IP address is personal data, including a dynamic one, because an internet provider could in principle link it back to a person. That makes this a privacy notice rather than a formality, even though the site itself is about as inert as a website gets.
Why it's kept
Security, abuse prevention, and troubleshooting. Logs are how you find out that something is broken, or that a bot is probing for vulnerabilities — which, for the record, happens to every public host continuously. The legal basis is legitimate interest under Article 6(1)(f).
How long
30 days. Access logs rotate daily and older ones are deleted automatically. The record of blocked addresses is kept for at most five weeks. The server's nightly backups also contain these logs; each backup is deleted after 7 days. There is no archive and no long-term store.
What this site does not do
- No analytics. No Google Analytics, no Plausible, no pixels, no beacons.
- No tracking cookies. The site sets no cookies of its own — you can check the response headers yourself.
- No third-party embeds that would report your visit elsewhere. Fonts are served from this domain, not a font CDN.
- No advertising, no data sharing, no selling. There is nobody to share it with.
This is also why you are not being asked to dismiss a cookie banner. Consent banners exist because of the ePrivacy rules on storing or reading data on your device. This site does neither, so there is nothing to consent to.
Who else sees the traffic
Nobody in between. Pages are served directly from my own server, with no intermediary company — no CDN, proxy or hosting provider — in the path. No third party processes your requests or sets cookies on them.
The only outside service involved is the domain's DNS provider, which answers the lookup of the name jonasfiers.eu. That lookup normally comes from your internet provider's resolver rather than from your device, and it happens before any visit to the site itself.
Your rights
You can ask what is held about you, ask for it to be deleted, or object to the processing. In practice, an IP address in a log is hard to tie to a person without more information than I have — so a request will usually need the IP and an approximate timestamp to find anything at all.
Email hello@jonasfiers.eu. If you are not satisfied, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).
Who is responsible
Jonas Fiers, Belgium. Contact: hello@jonasfiers.eu.
Changes
If what the site records ever changes, this page changes with it, and the date at the top moves. There is no changelog because there has been nothing to log.