Privacy Policy
Last updated: June 2026
1. Who is responsible for this website?
This website is operated by:
moc.idlawemsti@idlaw
If you have any questions about how your data is handled, feel free to reach out directly.
2. Hosting and infrastructure
This website is hosted by Magic Pages (getmagicpages.com). Your data is stored on servers operated by Hetzner Online GmbH, located in Germany (EU). A Data Processing Agreement is being negotiated with Magic Pages.
As part of their infrastructure, Magic Pages uses:
- Hetzner Online GmbH (Germany) — server hosting and storage
- Cloudflare, Inc. (US/EU) — content delivery network and DDoS protection. Data transfers outside the EU are covered by Standard Contractual Clauses (SCCs).
- Mailgun (US/EU) — email delivery for system emails (e.g. subscription confirmations). Covered under Magic Pages' sub-processor agreement.
Every time you visit this website, your browser automatically transmits technical data to the hosting server, including your IP address, browser type, operating system, referring URL, and the date and time of the request. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in operating a stable and secure website) and is not stored beyond standard server log retention periods.
3. Newsletter and free membership
If you sign up for my letters, I collect your email address. I use this to send you my newsletter.
Legal basis: Art. 6(1)(a) GDPR — your consent. You give this by entering your email and clicking the confirmation link in the email you receive (double opt-in). You can withdraw your consent at any time by clicking the unsubscribe link in any email, or by emailing me directly.
Your email is processed via Mailgun, which is managed by my hosting provider Magic Pages and covered under their Data Processing Agreement.
I will not share your email address with anyone else or use it for any purpose other than sending you my letters.
4. Paid membership
If you become a paid supporter, I collect your email address and payment details. Payment processing is handled by Stripe, Inc. (US). I never see or store your full card details — Stripe handles all of that.
Legal basis: Art. 6(1)(b) GDPR — performance of a contract.
Stripe is certified under standard contractual clauses for data transfers outside the EU. For more information, see Stripe's Privacy Policy.
5. Website analytics
This website uses Ghost's built-in analytics to understand how many people visit and which content is popular. This is processed server-side using first-party data only. No tracking cookies are set, no fingerprinting is used, and no data is shared with third parties.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in understanding how my content is being read.
6. Cookies
This website uses the following cookies:
| Cookie | Purpose | Duration | Legal basis |
|---|---|---|---|
ghost-private | Keeps you logged in as a member | ~6 months | Art. 6(1)(b) — contract |
__stripe_mid | Stripe fraud prevention (machine identifier) | ~1 year | Art. 6(1)(f) — legitimate interest |
__stripe_sid | Stripe fraud prevention (session) | Session | Art. 6(1)(f) — legitimate interest |
The Ghost and Stripe cookies are strictly functional — they only appear if you are a member or go through the checkout process. No marketing or tracking cookies are used on this site.
7. Local browser storage (localStorage)
The site search feature stores a local index of public post titles in your browser's localStorage. This contains no personal data and is never transmitted to any server. It is used purely to make search fast and work offline.
8. Your rights
Under GDPR, you have the following rights regarding your personal data:
- Access — you can request a copy of the data I hold about you
- Rectification — you can ask me to correct inaccurate data
- Erasure — you can ask me to delete your data ("right to be forgotten")
- Restriction — you can ask me to limit how I process your data
- Portability — you can request your data in a machine-readable format
- Objection — you can object to processing based on legitimate interest
- Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, email me. I will respond within 30 days.
9. Right to complain
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority responsible for my location:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Postfach 3163
65021 Wiesbaden
www.datenschutz.hessen.de
10. Changes to this policy
If anything material changes — a new service, a new type of data collected — I will update this page. The date at the top always reflects when it was last revised.
A note on tone: I have tried to write this in plain language. If anything is unclear or you have questions about how your data is handled, just email me — I am happy to explain.