Privacy
In short: this blog has no tracking, no analytics, no ads, and loads no scripts or fonts from other servers. The public pages set no cookies. What follows is exactly which data arises anyway.
Controller
Patrick Arndtinfo@allthing.eu
Visiting the pages
When you open a page, your browser necessarily sends your IP address, the requested address, the time and its user agent to the server. The page cannot be delivered without them (Art. 6(1)(f) GDPR). The server is hosted by netcup GmbH. The blog application itself writes no IP addresses to its logs; error logs contain only the path, method and status code of the failed request.
Comments
Commenting needs no account. Only the name you choose to give, your text, the time and the post you comment on are stored. Your IP address, an email address or a cookie are not. I review every comment before it is published; it then appears publicly under the post (Art. 6(1)(a) GDPR, your consent by submitting it).
Two measures keep spam out without any third party. Before sending, your browser solves a small computational puzzle (ALTCHA) that this server issues and checks. And at most three comments are possible within ten minutes: for that, your IP address is hashed with a random value that is replaced every day and counted in memory only; it is never stored and cannot be traced back after a day at the latest (Art. 6(1)(f) GDPR, preventing abuse).
Comments stay stored until I delete them. If you want a comment of yours removed, write to me with the post and the text; without accounts, that is the only way I can tell it is yours.
Storage in your browser
When you switch between the light and dark theme, your browser remembers the choice in its local storage. It never leaves your device and is needed for the function you asked for (§ 25(2) no. 2 TDDDG). Signing in to manage the blog uses session cookies; that concerns only me as the author.
Content from other sites
Posts point to sources on other websites. A link loads nothing until you click it. The summaries on the source pages may contain images loaded directly from that source's server, which then receives your IP address; its own privacy policy applies to what it does with it.
Your rights
You have the right of access, rectification, erasure and restriction of processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent with effect for the future (Art. 15–21 GDPR). Just write to me. You can also lodge a complaint with a data protection supervisory authority.