Privacy Policy
How this website handles data — in short: no analytics, no cookies, no third-party trackers, and all fonts, scripts and styles served from this domain.
Controller
The controller responsible for data processing on this website is:
Kakanat Shibin Devadas
Gilbert Str. 16, 22767 Hamburg, Germany
Email: shibinkidd@gmail.com
Full contact details are in the Imprint.
What we collect, and why
Edge log files
When you visit this site, the hosting infrastructure automatically records technical data that your browser transmits: the requested URL, date and time of access, the HTTP status and volume of data transferred, the referring page, and your browser and operating system. Your IP address is processed transiently to deliver the page and is not combined with other data to identify you.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable, correctly delivered pages). Logs are kept only as long as needed for operation and security.
Analytics — no client-side tracking
This website loads no analytics script, sets no cookies, and stores or reads nothing on your device — no Google Analytics, no Umami, no beacon of any kind. So no cookie consent banner is needed.
We do review aggregate, server-side traffic statistics (such as total requests and bandwidth) that our hosting provider, Vercel, derives from the request log data described above. This involves no additional collection, no script in your browser, and no way to identify you individually.
Fonts, scripts and assets
All fonts, styles, scripts and images — including the web fonts, the maths renderer (MathJax) and chart library used on some posts — are served from this domain. We do not load Google Fonts, CDNs, or any other third-party resources as part of the site’s design, so simply visiting a page sends no data to external hosts.
Embedded media and external links
Individual posts occasionally embed external media (for example an audio or video player) or link out to other websites. Where a post embeds third-party media, loading that media may transmit data to the provider concerned; this happens only on the specific posts that use it, and the respective provider is responsible for its own processing. Plain hyperlinks do not transmit your data until you follow them.
Contact by email
If you email us, we process your message and contact details solely to handle your enquiry (Art. 6(1)(b)/(f) GDPR) and retain them no longer than necessary.
Hosting
This site is hosted on Vercel (Vercel, Inc.), which serves the pages from its global edge network and provides the associated CDN and delivery infrastructure. The site is a set of static files with no server-side application; Vercel processes the connection data needed to deliver those pages (e.g. IP addresses in request logs) on our behalf as a processor under Art. 28 GDPR, governed by Vercel’s Data Processing Addendum. Vercel in turn relies on infrastructure sub-processors (primarily Amazon Web Services) bound to equivalent data-protection obligations.
Domain name resolution (DNS) for this site is provided by Nettigrity. Authoritative DNS answers name-resolution requests for the domain and does not receive data that identifies you individually.
International data transfers
Vercel, Inc. is based in the United States, so connection data may be processed outside the European Economic Area. This transfer is safeguarded under Art. 46 GDPR by the EU Standard Contractual Clauses incorporated into Vercel’s Data Processing Addendum, and Vercel is additionally certified under the EU-U.S. Data Privacy Framework. You can request the current status of these safeguards from the controller listed above.
No transfer to third parties
We do not sell your data and do not share it with third parties for advertising. Data is disclosed only where legally required or to processors acting on our instructions (e.g. hosting) as described above.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17) and restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21); and
- lodge a complaint with a supervisory authority (Art. 77) — in Hamburg, the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.
To exercise any of these, email the controller above.
Changes to this policy
We may update this policy to reflect changes to the site or the law. The current version always lives at this URL; the date at the top shows when it last changed.
See also our Imprint.