Privacy policy

^{Last updated: 2026-03-31}

This page explains what data I collect, how I use it, and how I protect your privacy when you visit https://igerman.cc (the "website"). I am committed to transparency and respecting your privacy to the best of my technical ability.

• Privacy policy
  • Legal basis
  • Data collection and use
  • Cookies
  • Data storage and security
  • Your rights under GDPR
  • Disclaimer

Legal basis

As this website is hosted in Germany, I process your data in accordance with the General Data Protection Regulation (GDPR). The primary legal basis for processing server logs and analytics is Article 6(1)(f) GDPR (Legitimate Interests): to ensure the security, stability, and performance of the website.

Data collection and use

I use several layers of logging and analytics for security and performance monitoring:

• Server logs (Caddy): My web server logs incoming requests. This includes your IP address, user agent, request headers, path, and timestamp.
  • Purpose: Security monitoring, preventing DDoS attacks, and automated blocking of malicious actors (via Fail2ban/GoAccess/custom scripts).
  • Retention: These logs are automatically deleted from the live server after 30 days. Encrypted backups of logs are stored on a separate server for a maximum of 180 days. Logs are not shared with any third parties, except for automated abuse reporting as described in the Security section below.
• Infrastructure (Cloudflare): This site uses Cloudflare. Cloudflare may process your IP address and device information to provide DDoS protection and security filtering. Cloudflare’s privacy policy is available here.
• Analytics (GoatCounter): I use a self-hosted instance of GoatCounter (on statistics.igerman.cc). This tool is compliant by design, does not use cookies, and only collects anonymized data such as referrers, OS, screen size, and location. This data is stored solely on my server and is never shared with third parties. Anonymous statistics are retained indefinitely for long-term analysis.
• Banner (Arivertisements): I embed a banner from ad.ari.lt. It is a non-commercial embedded image service that serves static images and optional outbound links. This service may collect your IP address and the timestamp of your visit. Please see their privacy policy for details.
• AbuseIPDB: I embed an SVG image from AbuseIPDB to display the number of reports I submitted. This does not track you and is only used for displaying the abuse reports and linking to my profile. You can find AbuseIPDB’s privacy policy here.
• Koutube: I use Koutube to embed YouTube videos as images. Koutube does not log personal data, but it is subject to Cloudflare's privacy policy as it is hosted on Cloudflare Workers. The image is a link to YouTube. When you click it, YouTube may collect data according to their privacy policy.

Cookies

• I do not use tracking or marketing cookies.
• Cloudflare may place essential security cookies (such as __cf_bm) to identify trusted web traffic and prevent bot attacks. These do not track you across other websites.

Data storage and security

• Location: The website is hosted on an Oracle Cloud instance located in Germany.
• Backups: Encrypted backups of the entire server are stored on a separate, private server under my complete control. These backups are retained for a maximum of 180 days. This means that while live server logs are deleted after 30 days, they may exist in encrypted backup archives for up to 6 months.
• Measures: I employ HTTPS (encryption in transit), firewall rules, regular system updates, and hardening techniques to protect your data.
• Abuse reporting: In the event of detected malicious activity (like brute-force attacks, unauthorized scanning, or exploitation attempts), the offending IP address and associated request metadata may be automatically reported to third-party abuse databases, specifically AbuseIPDB. You can find AbuseIPDB’s privacy policy here.

Your rights under GDPR

Because your IP address is processed, you have the following rights under the GDPR:

• Access: You can ask what data I have about you (though since I don't use accounts, this is usually just an IP address in a log file).
• Erasure: You can request that I delete your data.
• Object: You can object to the processing of your data for analytics purposes.

To exercise these rights, please contact me at privacy [ат] igerman.cc. Note that I may require proof of IP ownership to verify a request regarding log data.

Disclaimer

This is a personal website operated by an individual. While I take security seriously, this service is provided "as is" without formal guarantees of 100% uptime or error-free data handling. Nothing in this policy limits liability that cannot be excluded under German or EU law.