/en/privacy
Privacy
This is a short English summary. The legally binding German version is at /datenschutz.
What data is collected?
schollmayer.info is hosted on Vercel (in Frankfurt, region fra1). Vercel writes standard HTTP server logs (IP, user agent, requested URL) for security and operational reasons. These logs are deleted after a few days.
Visitor analytics
I measure visits myself with a self-built setup, hosted on Supabase EU (AWS eu-central-1). No third-party tools, no profiling, no matching across devices or websites. Nothing is written to or read from your device for this.
What is recorded: the page opened (path without query string), the host you came from, a campaign tag from the link (utm parameters), page language, device type, browser and OS family, and country. Also whether the page was actually read (visible for 3 seconds or used), active reading time, scroll depth, which homepage sections were in view, and clicks on email, phone and external links (only the target, such as “linkedin.com”).
To count pages of the same visit together, the database computes a checksum from IP address and browser string plus a random value that changes every day. IP address and browser string are not stored. The daily random value is deleted with the first visit of the next day, so the checksum can no longer be linked to anyone and visits on different days cannot be connected.
For the contact form, only whether it was seen, started, sent or abandoned is recorded, and on abandonment or a validation error the name of the field. Never any content. Only a counter per hour, step and field is stored, without IP address and without the daily checksum, so it is stored without reference to any visit. Requests from recognisable bots are not stored, only counted per day.
Purpose: to see where visitors come from, what they read and where they leave, to improve the site. Legal basis: Art. 6(1)(f) GDPR. Records are deleted after 13 months (on the first visit of a day, for everything older). Only I can see the analysis. Records from the earlier, simpler measurement up to October 2026 (no IP address, no identifier) were deleted in October 2026.
You can object at any time (Art. 21 GDPR). On your request the site then sets a cookie “smi_nicht_zaehlen” that is only sent to the measurement endpoint and stops your visits from being stored, for 180 days in this browser.
Done: your visits are no longer counted in this browser.
Done: your visits are counted again in this browser.
Contact form
When you fill out the contact form at /en/contact, your name, email, message and the type of request are used only to handle your request. Your IP address and browser identifier are not stored with it. The data is stored on Supabase EU (AWS eu-central-1) under a data processing agreement. I am notified of each request by an email containing it, sent through Resend (Plus Five Five, Inc., USA, data processor). Resend stores this email in the United States; the transfer is based on the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract) or Art. 6(1)(f) GDPR. Deletion: no later than 12 months after our conversation has ended, unless statutory retention periods apply.
No third-party trackers
No Google Analytics, no Meta pixels, no marketing cookies. No newsletter signup is offered on this site.
Your rights (GDPR)
You can ask me at any time about what personal data is stored, request a correction, deletion or portability, and object to processing. Use the email address below.
Email: mail [at] schollmayer [dot] info