Privacy

This is a personal blog by Matthias Neuhauser (matthias@gwrx.at). No account, no advertising, no tracking cookies.

Server logs

The blog runs on servers I operate. Requests pass through my own reverse proxy (Pangolin), which records IP address, time, requested address, status and browser identifier for operation and security. These logs are deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR.

Visit statistics

I count visits with Umami, which I run myself (stats.app.bytebrand.cloud). It sets no cookies and stores no IP address: it records the page, referrer, browser type, device type and country, and recognises a repeat visit within one day only through a hash that changes daily. No profile is built and nothing is shared. Legal basis: Art. 6(1)(f) GDPR.

Mastodon reactions

Stories that were posted to Mastodon show their replies. Your browser loads them directly from https://chaos.social, so that server sees your IP address and browser, under its own privacy policy. Favourite and boost counts are fetched by my server and need no request from you.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR); just write to me. You may lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

Last updated: 31 October 2026