Privacy

This is a personal website. I collect as little as I can, I never sell data, and there are no ads. Here is exactly what happens to your data when you visit, write to me or subscribe.

Last updated: 8 October 2026

Who is responsible

Norbert Levente Kiss, Basel, Switzerland. Email [email protected]. I am the controller for the personal data described here under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

When you visit

The site runs on a server at Hetzner in Germany and is delivered through Cloudflare. To serve a page, both necessarily process your IP address, browser type and the page you asked for. Cloudflare also runs its security checks (including a small bot-detection script) and hides email addresses from spam scrapers.

Analytics

I use DataFast to see which pages get read. It records page views, the referring site, approximate country, device and browser, and sets two first-party cookies (a visitor ID and a session ID) so repeat visits are not double-counted. Requests from bots and AI crawlers are also counted on the server. No ad networks, no cross-site tracking, and the data is not shared with anyone else.

Cookies and local storage

Besides the analytics cookies above, the site sets one cookie, km_mode, to remember whether you use the desktop or the website layout. Your theme, colours and window positions are kept in your browser's local storage and never leave your device. If you sign in to the client portal, a session cookie keeps you signed in.

Contact form

When you use the contact form, I store what you enter (name, organisation, email, message and budget, if given) together with your IP address and browser type, which help me filter spam. The message is saved in the site database and forwarded to my inbox through the email service Resend. I keep it for as long as the conversation is useful and delete it on request.

The signup form under the essays is run by Buttondown, which stores your email address to send you new essays. Every email has an unsubscribe link, and unsubscribing stops all further emails.

Client portal

The client portal is only for people I work with. Signing in uses Google, which shares your name, email address and profile picture with the site so it can show you your own engagements and documents.

Other services on essay pages

Essay pages load fonts from Google Fonts, icons from Font Awesome, the MathJax library from jsDelivr, and my profile photo from Cloudflare Images. Your browser fetches these directly, so those providers see your IP address as part of the request.

Backups

The site database (published posts, contact messages and any newsletter signups stored on the site) is backed up every night to a private GitHub repository that only I can access.

Your rights

You can ask what data I hold about you, have it corrected or deleted, or object to its use. Email [email protected] and I will reply within 30 days, usually much sooner. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.

Changes

If the site starts doing something new with personal data, this page changes first. The date at the top shows the last update.