PC::PerlCoders
Search About Submit a question GitHub

Privacy

What we collect, and the much longer list of what we do not.

Information under Articles 13 and 14 GDPR. Written to be checked against the code rather than believed.

Controller

Controller
Matthias Ramahi, Kempener Straße 44, 40699 Erkrath, Germany
DPO
A data protection officer is only required above certain thresholds. No data protection officer has been appointed.

What this site does not do

These are properties of the build, not promises about intent. Each one is checkable.

  • No analytics. There is no Google Analytics, Plausible, Matomo or equivalent. No page-view or event beacon is sent anywhere.
  • No advertising and no tracking pixels. No advertising network, no retargeting, no affiliate scripts.
  • No cookies set by this site. See Cookies and storage for the full detail.
  • No third-party JavaScript. GSAP, which drives the Timeline scroll, is served from this domain rather than a CDN precisely so that visiting the Timeline does not disclose your IP address to a third party.
  • No profiling and no automated decision-making in the sense of Art. 22 GDPR.

Server logs

The hosting provider records standard access logs: IP address, timestamp, requested URL, HTTP status, referrer and user agent. This is technically necessary to deliver the site and to detect abuse.

Legal basis
Art. 6 (1)(f) GDPR — legitimate interest in delivering and securing the service.
Retention
Logs are retained only as required for security and reliable delivery; the exact platform-level period follows the active Vercel account configuration and Vercel's current policies.
Processor
Vercel Inc., United States. The operator uses Vercel's data-processing terms and the safeguards described in Vercel's privacy documentation.

Web fonts

Typefaces are served from this domain. IBM Plex Sans, IBM Plex Mono and Newsreader are stored under /fonts/ and requested from here — not from fonts.gstatic.com. Loading a page therefore transmits nothing to Google.

Why this matters Requesting fonts from Google at page load transmits the visitor's IP address to Google, and LG München I held that doing so without consent infringes the GDPR (3 O 17493/20, 20 January 2022). Self-hosting removes the transfer rather than asking you to consent to it. You can verify it: open the network panel and look for any request leaving this origin. There is none.

Forms

The contribute forms — ask a question, submit a correction, submit an artifact — are processed locally in your browser. The page validates what you type and prepares an email in your mail application. Nothing is uploaded by the website, and you decide whether to send, edit or discard the message.

Purpose
Answering you, and editorial review of the submission.
Legal basis
Art. 6 (1)(a) GDPR — consent, given by submitting the form after reading the handling note.
Recipients
The editorial contact and the mail providers involved in delivery. Submissions are not published without review.
Retention
Editorial correspondence is kept only as long as needed to answer or review the submission, subject to legal retention duties.
Spam handling
A honeypot field evaluated in your browser. It does not profile you.

Labs tools

The Legacy URL Mapper and any future lab run entirely in your browser. URLs you paste are never uploaded, logged or stored. There is no network request after the page loads and nothing is written to local storage. The analysis module ships unminified so you can verify this: search it for fetch, XMLHttpRequest, sendBeacon and localStorage and you will find none.

GitHub links

The site links to its public GitHub repository for corrections and source review. GitHub is not embedded and no GitHub code runs on this site. Data reaches GitHub only if you choose to follow one of those external links; GitHub's own privacy policy then applies.

Your rights

Under the GDPR you have the right to:

  • access the data we hold about you (Art. 15);
  • rectification (Art. 16) and erasure (Art. 17);
  • restriction of processing (Art. 18) and data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw consent at any time, without affecting processing already carried out (Art. 7 (3));
  • lodge a complaint with a supervisory authority (Art. 77) — in Germany, the authority of your federal state.

In practice, for most visitors the honest answer to an access request is that we hold nothing linked to you at all, because nothing on this site collects it.

Last reviewed . Material changes to this document are recorded in the site changelog and announced in Pulse.