what this site knows about you.
uk gdpr · dpa 2018Short answer: nothing you did not send me. There is no account, no form, no cookie banner and no tracking pixel. This page covers the parts that are not quite that simple — the host, YouTube thumbnails and your inbox.
who is responsible (link to this clause)
The controller for any personal data processed through this site is Daniel C. Fat, publishing as cristianexer, based in Birmingham, England. Contact: hello@cristianexer.dev.
The site is operated under the UK GDPR and the Data Protection Act 2018.
what the site collects directly (link to this clause)
Nothing. There are no accounts, no contact forms, no comments, no newsletter capture, no cookies set by this domain, no advertising network and no cross-site tracking.
The pages are static files. There is no application server behind them, and no database that could hold a record of your visit.
the one thing stored on your device (link to this clause)
The site remembers whether you switched motion on or off, so a reduced-motion preference survives a page load. It is written to your browser's local storage under the key ce:motion, holding the literal value on or off.
It is not a cookie, it is never transmitted anywhere, and it contains no identifier of any kind. Clearing site data for this domain removes it permanently.
hosting and server logs (link to this clause)
The site is served as static files by GitHub Pages. To deliver a page, GitHub necessarily processes connection data — including your IP address, the request and your user agent — for delivery, abuse prevention and security.
That processing happens under GitHub's own privacy statement. GitHub Pages does not expose access logs to site owners, so I never see, store or analyse them.
youtube thumbnails and watch links (link to this clause)
Pages that list videos load thumbnail images from YouTube's image host. Requesting an image reveals your IP address and user agent to Google in the same way any image request does.
No video player is embedded on this site. Watch links open youtube.com in a new tab, and Google's privacy policy governs what happens after you follow one.
analytics (link to this clause)
If analytics is ever configured for a build, it is a cookieless, privacy-preserving script that counts aggregate page views without cookies, fingerprinting or cross-site identifiers, and never builds a profile of an individual visitor.
The state of the build you are reading right now is printed in the table below rather than described here, because a policy that describes the wrong build is worse than no policy.
if you email me (link to this clause)
Email is the only route into this site that involves you handing anything over. When you use it, I hold your address, your message and whatever you chose to put in it, for the purpose of replying and continuing the conversation.
The lawful basis is legitimate interests — answering somebody who deliberately wrote to me. Messages are kept while the conversation is live or useful, and deleted when it is not. Your address is never added to a mailing list, never sold and never shared with anybody for marketing.
fonts and assets (link to this clause)
Fonts are bundled with the site and served from this domain. There is no request to a font service, no third-party stylesheet and no tag manager. Apart from YouTube's image host, the page makes no third-party requests at all.
international transfers (link to this clause)
GitHub and Google are United States companies operating global infrastructure, so processing carried out by them as hosts of the pages and the video may take place outside the United Kingdom, under the transfer safeguards described in their own policies. No personal data is transferred by me.
your rights (link to this clause)
Under the UK GDPR you have the rights below over any personal data I hold — in practice, that means email correspondence, because there is nothing else. Email hello@cristianexer.dev to exercise any of them, and expect a response within one month.
- access
- Ask for a copy of what I hold about you.
- rectification
- Have anything inaccurate corrected.
- erasure
- Ask for the correspondence to be deleted.
- restriction
- Ask me to stop processing it while a question is resolved.
- objection
- Object to processing carried out under legitimate interests.
- portability
- Receive what you supplied in a portable format.
children (link to this clause)
This site is written for a professional and technical audience and is not directed at children. No personal data is knowingly collected from anyone under 13.
changes to this policy (link to this clause)
Any change is published on this page with a new effective date. If a change ever materially affects how personal data is handled, it will be stated plainly at the top rather than buried in a clause.
complaints (link to this clause)
If you think this site has handled your data badly, tell me first — it is a small site and a direct answer is usually faster than a process. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at any time.
Generated from the same configuration the pages were built with, not written by hand.
- cookies set by this site
- none
- browser storage
- ce:motion — motion preference, on or off
- analytics in this build
- no analytics script is loaded
- video playback
- opens youtube.com in a new tab; this site embeds no player
- thumbnail host
- i.ytimg.com
- fonts
- self-hosted on this domain
- hosting
- github pages — static files
The honest summary is that this site is a stack of static files with one browser preference and an email address. Everything above exists so that claim can be checked rather than trusted.
email me about this