Where Your Data Goes

This site is run by Olger Chotza, a private individual in Greece. For anything on this page, email me through the contact page.

The site is served by GitHub Pages. Like any web server, GitHub receives your IP address, your browser's details and the page you asked for, and keeps them in logs for security and to keep the service running. I have no access to those logs.

GitHub is based in the United States and takes part in the EU–US Data Privacy Framework. Its handling is described in the GitHub Privacy Statement. The basis is my legitimate interest in having a working, secure website (GDPR Art. 6(1)(f)).

Photo Cleaner reads and rewrites your photos inside your browser. They are never uploaded, to me or anyone else.

If you switch on Location while editing a photo, the map is loaded from the OpenStreetMap Foundation, and place searches go to its Nominatim service. Both receive your IP address plus the area you look at or the text you search for. Nothing is sent until you switch Location on.

Drop and the Arcade connect your devices to each other directly. To find each other, devices briefly announce an encrypted room identifier on public Nostr relays run by third parties, and use public STUN servers, such as Cloudflare's, to work out a route. These see your IP address. Files, messages and game moves then travel directly between the devices, encrypted, and never pass through a server of mine. Devices in the same room can see each other's IP address, which is how a direct connection works. In the Arcade, the name you pick is shown to the other players in the room.

Checking a book copy happens entirely on your device. That page is not allowed to connect anywhere else.

Your browser remembers a few settings you choose: light or dark theme, the Arcade's sound setting and player name, and the current game's scores until you close the tab. They stay in your browser, are never sent anywhere, and you can clear them at any time in your browser's settings. None of them are cookies.

I receive your address and whatever you write, and use them only to reply. Emails are stored by my email provider on my behalf, and I delete conversations once they are no longer needed. The basis is my legitimate interest in answering you, or taking steps you asked for before working together (GDPR Art. 6(1)(b) and (f)).

Links to GitHub, LinkedIn, PyPI and other sites take you to services with their own privacy policies. Nothing about you is passed to them by this site.

Under the GDPR you can ask what I hold about you, have it corrected or deleted, restrict or object to how it is used, and get a copy of it. In practice I hold nothing about you unless you emailed me. Email me and I will answer within one month.

You can also complain to the Hellenic Data Protection Authority at dpa.gr, or to the authority where you live.

If what the site does with data changes, this page changes with it, and the date at the top moves.