Privacy policy

Lorenz Hilpert, address as in the imprint. Email: lorenz@losoft.dev

This website is hosted by Vercel Inc., [ADDRESS FROM VERCEL’S DPA], USA. When you open a page, Vercel’s servers automatically log your IP address, the date and time, the page requested, the referring page and your browser’s user agent.

These logs are needed to deliver the website and keep it secure. Vercel keeps them for [N days — depends on the plan]. I have a data processing agreement with Vercel.

Vercel may process this data in the USA. The transfer is based on the EU–US Data Privacy Framework (Art. 45 GDPR) and on the EU Standard Contractual Clauses in Vercel’s data processing agreement (Art. 46 GDPR).

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a secure, working website.

If you use the contact form or email me, I process your email address, your message and, if you give it, your name — only to reply to you. Messages are deleted when the conversation is finished, unless the law requires me to keep them.

Messages sent with the contact form are delivered to my mailbox by Resend, Inc., [ADDRESS FROM RESEND’S DPA], USA, which processes them on my behalf. I have a data processing agreement with Resend. Resend may process this data in the USA. The transfer is based on the EU–US Data Privacy Framework (Art. 45 GDPR) and on the EU Standard Contractual Clauses in Resend’s data processing agreement (Art. 46 GDPR).

Legal basis: Art. 6(1)(b) GDPR if your message is about a contract, otherwise Art. 6(1)(f) GDPR — legitimate interest in answering enquiries.

To stop abuse of the form, your IP address is held briefly in the server’s memory to limit how many messages can be sent from one network within 10 minutes. It is dropped from memory after that window. It is not stored anywhere and is not sent to Resend.

The form also uses ALTCHA, a spam check that runs in your browser: your device solves a small computing task, and this server checks the result when you send the form. It sets no cookies, involves no third party and uses no personal data.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in protecting the contact form against spam and abuse.

This website sets no cookies. The fonts are hosted on this server, so nothing is loaded from Google or other third parties.

With your consent, I use Vercel Web Analytics to see which pages are read. It is a statistics service of my host Vercel Inc. (see section 2). Nothing is measured until you choose “allow” in the small prompt at the bottom of the page. Only after you allow it does your browser load a small script from this website’s own address. For each page view, it sends Vercel the page address, the referring page, the time, your browser and operating system with their versions, the device type (desktop, tablet or mobile) and your approximate location (country, region, city), which is derived from your IP address.

Vercel Web Analytics uses no cookies and does not store your IP address. To count visitors, Vercel computes a hash from the request; it is discarded after 24 hours. I only see aggregated statistics, which cannot be linked to you, and no profiles are built across websites. The same data processing agreement and transfer safeguards as for hosting apply (section 2).

If your browser sends a Global Privacy Control signal, this counts as “decline”: you are not asked and nothing is measured. Your answer (“on” or “off”) is saved in your browser’s local storage, only on your device, so you are asked only once. You can change it at any time with “Privacy settings” in the footer of every page, or by typing analytics off (or analytics on) in the terminal on the home page. Withdrawing your consent stops the measurement at once; it does not affect the lawfulness of what was measured before.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG.

If you switch between the light and dark theme with the button in the header, your choice is saved in your browser’s local storage, only on your device. It is never sent to me or anyone else. You can delete it at any time by clearing this site’s data in your browser.

Links to GitHub and X are plain links. No data is sent to them until you click one; after that, their own privacy policies apply. Repository details shown on this site are fetched from GitHub when the site is built, not in your browser.

You can exercise these rights at any time by emailing me:

Where processing is based on Art. 6(1)(f), you can object to it at any time for reasons arising from your particular situation. You can also complain to a data protection authority, for example the one in your German state or at your place of residence.