Privacy Notice

This notice explains how personal data is processed when you visit storz.net and its blog.

1. Controller

Sacha Storz
Guldeinstr. 31
80339 Munich
Germany
Email: sacha@storz.net

2. Hosting and server logs

This website is hosted by manitu GmbH, Welvertstraße 2, 66606 St. Wendel, Germany. When you request a page, your browser sends technically necessary access data to the web server. This may include, in particular, your IP address, date and time, requested address, amount of data transferred, HTTP status, referrer, and information about your browser and operating system.

This data is processed to deliver the website securely and reliably, investigate errors, and prevent abuse. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and functional operation of this website. manitu states that regular web server logs are retained for approximately 21 days. The provider's internal security logs may be subject to different periods and, according to manitu, are deleted as soon as technically feasible.

3. Blog like counter

Blog articles retrieve their current like count from an interface hosted on storz.net. No social-network content is embedded and no data is sent to a social network for this purpose. If you actively select “Like,” your browser creates a random identifier. This identifier and an indication that you have already liked the article are stored in your browser's local storage. The entries are named storz-blog-like-voter and storz-blog-liked:<article identifier>. They remain there until you clear this website's data in your browser.

The server stores only the article identifier, a SHA-256 hash of the random browser identifier, and the time of the vote. This enables the counter and prevents repeat votes with the same identifier. The data is not used to create user profiles or track you across websites. Pseudonymous like records are retained for as long as the like counter is offered so that the count and duplicate-vote protection remain intact.

To protect the counter against automated abuse, a time-varying HMAC value is also derived from the IP address when a like is submitted. The IP address itself is not stored in the like database. The value is used only to limit requests within a ten-minute window; expired entries are removed during subsequent like submissions.

The legal basis for server-side processing is Article 6(1)(f) GDPR. My legitimate interest is to offer a simple form of feedback and protect the counter against manipulation. Local storage is used only for the like function you explicitly request and is necessary to provide it (Section 25(2)(2) TDDDG).

4. Contact by email

If you contact me by email, I process your address, the content of your message, and the information it contains in order to respond. Depending on the subject, the legal basis is Article 6(1)(b) GDPR for steps prior to entering into a contract or Article 6(1)(f) GDPR based on my legitimate interest in handling general inquiries. The data is deleted when the inquiry has been resolved and no statutory retention obligations or legitimate reasons require it to be kept.

5. External links and sharing

This website contains ordinary links to external services, including LinkedIn, X, Bluesky, GitHub, Medium, Substack, Meetup, and Google Colab. The sharing buttons are ordinary links as well; no plugins or content from these providers are embedded. Your browser connects to the respective provider only after you open such a link. That provider is responsible for its subsequent processing of data.

6. Cookies, analytics, and external resources

storz.net does not use analytics, advertising, or tracking services and does not set cookies. Fonts, stylesheets, and JavaScript libraries are delivered locally. Apart from the like counter's local storage described in Section 3, no information is stored persistently in your browser.

7. Encryption

The website is delivered via HTTPS, which encrypts content and transmitted data while in transit.

8. Recipients and transfers

The hosting provider manitu processes technically necessary data as part of its web-hosting service. Data is disclosed to other recipients only when required by law or necessary for the establishment, exercise, or defence of legal claims. The website itself does not transfer personal data to third countries. If you voluntarily open an external link, the respective provider's information applies.

9. Your rights

Subject to the requirements of the GDPR, you have rights including access, rectification, erasure, restriction of processing, and data portability. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. To exercise your rights, email sacha@storz.net.

You also have the right to lodge a complaint with a data-protection supervisory authority. The authority responsible for private-sector controllers in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.

10. Last updated

September 12, 2026