privacy

who is responsible

the controller for data processed on this site is the site owner, qwertyquarty. you can reach them at me@qwerrie.ee.

what data is processed

this site is served through cloudflare, which processes visitor requests on behalf of the site owner. when you visit, the following data may be processed:

cloudflare web analytics does not use cookies or local storage and does not fingerprint individual visitors; the visitor ip is discarded at the edge and is not used to track users across sites. the site owner does not itself store visitor personal data. you are not asked to provide any personal data; simply visiting the site inherently transmits the technical request data above to our host, which cannot be avoided while browsing.

why and on what legal basis

data is processed to operate and secure the site (delivering content, mitigating abuse and attacks) and to understand aggregate, anonymous traffic. the legal basis is the site owner's legitimate interests under art. 6(1)(f) gdpr — namely running a secure, available website and measuring its performance. this is justified by a legitimate-interests assessment: the interest is a secure, working site and aggregate traffic insight; processing request metadata is necessary to serve any website; and because the data is not used to profile or track individuals (analytics are cookieless and aggregated), the impact on visitors is minimal. no data is processed for advertising or cross-site tracking.

cloudflare and transfers

cloudflare, inc. (usa) acts as a data processor and processes the data described above on the site owner's behalf. for visitors in the eea, uk and switzerland, the transfer to the united states is covered by cloudflare's certification under the eu–us data privacy framework (verifiable at dataprivacyframework.gov; the uk extension applies), with standard contractual clauses as a fallback. cloudflare maintains a list of sub-processors at cloudflare.com/gdpr/subprocessors. static assets such as icons are also served via the jsdelivr cdn, a third party that receives the requesting ip when the page is loaded.

cloudflare also applies rocket loader (asynchronous script loading) and email address obfuscation (anti-spam). these are performance and security features and do not process additional personal data. cloudflare may set strictly-necessary security cookies (for example to complete a bot challenge); these are not used for tracking and are exempt from consent. because no non-essential cookies are set, no cookie-consent banner is required.

retention

the site owner does not retain visitor personal data themselves. cloudflare retains request and security logs and web-analytics data as described in its privacy policy (cloudflare.com/privacypolicy); web-analytics beacon data is retained in full for about 7 days and then aggregated.

your rights

if your data is processed through this site, you have the right to access, rectify, erase, restrict and port your data, and to object to its processing. to exercise these rights, contact the site owner at me@qwerrie.ee. where cloudflare processes your data as a processor, you may also contact cloudflare at sar@cloudflare.com.

you also have the right to lodge a complaint with a supervisory authority, such as the competent german data protection authority (bfdi.bund.de).

changes

last updated: 2026-08-27. this page may be updated if data practices change.

back