Legal · GDPR · Datenschutzerklärung
Last updated 4 November 2026
This site is built on a simple principle: I collect as little as I can, store what I must, and never sell what you share. This is a static website — it sets no cookies and loads no third-party trackers. To see which pages are read, it uses Grynlume, a cookieless analytics tool I operate myself (section 3).
Thorsten Meyer, Blombergstraße 11 C, 82393 Iffeldorf, Germany. See the Impressum. Questions: contact@thorstenmeyer.com.
The site is hosted in Germany by ALL-INKL.COM — Neue Medien Münnich (data processing agreement in place). When you visit, the hosting provider automatically logs: your IP address, date and time of access, the resource requested, browser type and operating system, and the referring URL. This data is processed under Art. 6(1)(f) GDPR for the legitimate interest of operating and securing the site, and is not joined with personal profiles or shared for marketing.
Grynlume is a self-hosted analytics tool I operate on my own server in Germany. It counts visits, pages, sources and devices without cookies and without storing anything in your browser.
When you open a page, your browser sends the page address, the referring page, your
browser type, your screen width and your IP address to that server
(grynlume.grimfaste.com). The IP address and browser type are combined with a
random secret that changes every day and are stored only as a hash; the raw IP address is
never written to disk. Each daily secret is deleted after the following day, so you cannot be
recognised from one day to the next or across other websites. How far you scroll and how long
a page is actively open are stored as figures on that page view, not as a browsing history.
A click on an outbound link or a file download is recorded the same way.
To keep automated traffic out of the statistics, user-agent strings and the host names of referring websites are sent to TypeSafe (typesafe.ai), whose service classifies them. No IP address and no identifier is sent with them.
Requests to the analytics server pass through Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which routes traffic to the server and provides DDoS protection. Cloudflare processes connection data (including your IP address) in transit on my behalf under a data-processing agreement; transfers to the USA are covered by the EU–US Data Privacy Framework and standard contractual clauses.
Statistics are kept for 14 months (at the latest until the end of the following calendar month); aggregated counts without any visitor identifier are kept indefinitely. Legal basis: Art. 6(1)(f) GDPR — my legitimate interest in understanding which content is read. You may object at any time by writing to contact@thorstenmeyer.com.
All fonts, styles, and images are served from this domain (self-hosted). No requests go to Google Fonts or any other third-party CDN when you load this site; the only request to another host is the analytics request described in section 3.
The newsletter ("The Dispatch") is operated on thorstenmeyerai.com; its privacy policy applies there. This site only links to it.
Links lead to external sites (e.g. Apple Books, LinkedIn, YouTube, GitHub, and my ventures). When you follow them, the target provider processes your data under its own policy.
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, plus the right to lodge a complaint with a supervisory authority — in Bavaria: BayLDA, Ansbach.