Privacy Policy
This site is deliberately built lean: no cookies, no tracking services, no advertising, no forms, and not a single request to a third-party server when you open it. That is why this policy is short.
This English version is a translation provided for convenience. In case of doubt the German Datenschutzerklärung is the binding version. The statutory references are to German and European law and are given in their original form.
Controller
Wojciech Nakielski
Hahnenstraße 27
50997 Köln
Germany
Email: nakielski.wa@pm.me
What happens when you open a page
When you request a page, your browser transmits technically necessary data to the server, which records it in a log file:
- IP address of the requesting device
- date and time of the request
- the address requested and the volume of data transferred
- whether the request was successful
- browser type and operating system, and the previously visited page if your browser sends it
The purpose is the technical operation of the site and its protection against attack and misuse. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is providing the site reliably and securely. I do not analyse these logs, do not combine them with other data and build no profiles from them. They are not stored for longer than is necessary for these purposes; the hosting provider deletes them automatically after a few days.
Hosting
The site is hosted by Alfahosting GmbH, Halle (Saale), Germany. The server is located in Germany; no transfer to a third country takes place. The hosting provider processes the data named above exclusively on my behalf and on my instructions, on the basis of a data processing agreement pursuant to Art. 28 GDPR.
No cookies, no third-party servers
This site sets no cookies and embeds no advertising services, no social media services and no third-party analytics service. The typefaces are served by my own server and are not loaded from Google Fonts, so no third party learns your IP address when you open the page. There is no cookie banner because there is nothing to consent to.
Counting page views
To see which articles are read, this site counts its own page views. When you open a page, your browser reports its address to my server, which does nothing but increment a counter. All that is stored is how often a path was called up on a given day, for example:
/artikel/second-brain.html → 2026-09-14 → 37
Nothing is stored on your device and nothing is read from it, which is why no consent is required under § 25 (2) TDDDG. The legal basis for counting is Art. 6 (1) (f) GDPR; my legitimate interest is knowing which content is in demand.
So that the same visit is not counted more than once, the server derives a checksum from your IP address, your browser identification, the page requested and a random value regenerated each day. Only this checksum is stored, never the IP address itself. It serves solely to avoid counting a further view of the same page on the same day again, and it is deleted when the day changes. Because the random value changes daily, recognition across several days is technically impossible.
The counting runs on my own server. No third-party service is involved and no data leaves that server. There is no count of unique visitors across several days, no dwell time and no profiles. If you wish to prevent the counting, block JavaScript for this site; all content remains fully usable.
Your saved design choice
If you switch between the light and dark design at the top right, your browser remembers that choice under the key wn-theme in local storage (localStorage). The entry contains nothing but the word light or dark, stays on your device and is never transmitted to a server. It is only created once you press the button.
Since it serves only the service you yourself requested, storing it is strictly necessary and exempt from consent under § 25 (2) no. 2 TDDDG. You can delete the entry at any time through your browser settings; the site will then appear in the dark default design again.
Contact by email
If you write to me, I process your address and your message solely in order to reply. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR where a contractual relationship is being initiated. I delete the correspondence once it is settled and no retention obligations stand in the way.
Links to GitHub and LinkedIn
The references to GitHub and LinkedIn are plain links, not embedded content. A connection to the respective provider is established only once you click one of them, and from that point their privacy policy applies. Before that, neither of them learns of your visit here.
Your rights
Under the GDPR you have the right, in relation to me, to
- access to the data stored about you (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17) and restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
An email is enough. Independently of that, you may lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for my place of residence is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
No automated decision-making
No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place.