How I Handle Your Data.

I use Cloudflare Web Analytics to understand which pages are useful and how fast they load. The statistics are not used for advertising, selling data or tracking people across websites.

Cloudflare Web Analytics uses no cookies and stores nothing else in your browser. According to Cloudflare, visitors are not identified by their IP address, user-agent or any other data.

• Visited page. URL parameters are not stored.
• Referring page and timestamp.
• Browser, operating system and device type.
• Approximate country.
• Load times and other performance metrics for the page.

The GDPR legal basis is my legitimate interest in improving and operating the website with measurement that is as limited as possible.

Cloudflare keeps the detailed visitor statistics for 7 days. After that only an aggregated sample remains, for no more than 6 months.

I keep no access logs of my own for the website. The statistics from my former self-hosted Umami installation have been deleted.

The website runs on Cloudflare’s network. To deliver the pages and protect them from attacks, Cloudflare processes your IP address and technical details of the request, such as the requested address, browser and time.

This data is not used for marketing or visitor profiles. The legal basis is my legitimate interest in protecting and operating the service.

If you email me, I process the contact details and content you provide to reply and handle your request. The information is kept for as long as needed for the conversation, a possible agreement or legal duties such as accounting.

Cloudflare delivers the website and the visitor analytics. Cloudflare is a US company, and the transfer to the US is covered by the EU-U.S. Data Privacy Framework and by the EU Standard Contractual Clauses in Cloudflare’s data processing agreement. My email provider processes what you email me. I do not sell data or share it with advertising networks. No automated profiling or decision-making is used.

You may request access, correction, deletion or restriction and object to processing based on legitimate interests. The visitor analytics hold neither names nor IP addresses, so I usually cannot connect an individual analytics record to you.

You may also lodge a complaint with the Swedish Authority for Privacy Protection. Feel free to contact me first and I will try to resolve the matter directly.