This is a personal website. It runs no analytics, sets no cookies, embeds no third-party scripts, has no newsletter signup, no comment section, and no “we value your privacy” modal — because there is genuinely nothing here to consent to. The shortest honest privacy policy would be a single sentence. The GDPR, reasonably, asks for a few more.
Who is responsible
The controller for any personal data processed in connection with this site is:
Maximilian Krause
c/o WeWork, Taunusanlage 8
60326 Frankfurt am Main, Germany
max@kuatsu.de
Server logs
Like every machine on the public internet, the server delivering this site sees the IP address of each incoming request along with the standard HTTP envelope — user agent, requested URL, referrer, timestamp, response status. This data is processed to deliver the page you asked for, keep the service running, and defend against abuse.
- Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in operating and securing the service.
- Retention: access logs are kept for as long as needed for the purposes above (typically a handful of days) and then deleted.
- Processor: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, acting on the controller’s behalf under a data processing agreement per Art. 28 GDPR. Data is processed on servers located in Germany.
Email correspondence
If you write to max@kuatsu.de, your address and the contents of your message are processed for the purpose of replying. Messages are retained for as long as the conversation might still be relevant — usually until the loop is closed, sometimes longer if there is a business reason.
- Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in handling correspondence; or Art. 6 (1) (b) GDPR where your message concerns a contract or pre-contractual exchange.
What does not happen
No cookies are set. No data is sold, rented, or shared with advertisers. No third-party scripts run on these pages. Fonts are self-hosted from the same origin as everything else, so opening a page does not phone Google Fonts. There is no profiling, no automated decision-making within the meaning of Art. 22 GDPR, and no transfer of personal data to countries outside the EU/EEA initiated by this site.
Your rights
Under the GDPR you can ask for access to your data (Art. 15), correction of it (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), portability (Art. 20), and you can object to processing based on legitimate interest (Art. 21). Send any such request to max@kuatsu.de.
You also have the right to lodge a complaint with a supervisory authority. The competent authority for the controller is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit, but you may also contact the data protection authority in your country of residence.