Who I am
I am Sindastra, my website address is: https://www.sindastra.de.
What personal data gets collected and why
Comments
When visitors leave comments on the site, the data shown in the comments form, and also the visitor’s IP address and browser user agent string, get collected to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Contact form can be found at https://www.sindastra.de/contact/, any submissions will be stored and emailed to me. I may use hCaptcha to reduce spam.
Cookies
If you leave a comment on this site, you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit the login page, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, several cookies will be set up to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Cloudflare may place cookies. See here for more info on Cloudflare cookies.
Cookies Opt-in/out
You can opt in/out of non-essential cookie usage with the following link:
Privacy & Cookies PolicyPlease refresh the page after modifying your cookie settings to make sure they take effect.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
I use Matomo, for privacy-friendly analytics. Matomo is configured to not set any cookies, and no personal information is collected. Your IP address is anonymized (part of it is removed) before it is stored. This way, the IP address cannot be associated with any particular individual. In addition, your browser’s User-Agent string is stored and parsed.
If you’d like to opt out anyway, you can do so here, which will create an opt-out cookie so that we can remember not to track anything:
Who data is shared with
Data is not shared, but some things may be sent to third-parties for automated processing for spam and attack prevention. See the section on where data is sent below.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where data is sent
Visitor comments may be checked through an automated spam detection service called Akismet (see comment section above).
When you submit a message through the contact form, all your submitted data is emailed to me, where it will reside on Gandi.net or Mailbox.org email servers.
When you submit anything, it will go through Cloudflare’s network for DDoS and attack prevention.
To prevent spam, hCaptcha is used.
hCaptcha
We use the hCaptcha anti-bot service (hereinafter “hCaptcha”) on our website. This service is provided by Intuition Machines, Inc., a Delaware US Corporation (“IMI”). hCaptcha is used to check whether the data entered on our website (such as on a login page or contact form) has been entered by a human or by an automated program. To do this, hCaptcha analyzes the behavior of the website or mobile app visitor based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g. IP address, how long the visitor has been on the website or app, or mouse movements made by the user). The data collected during the analysis will be forwarded to IMI. hCaptcha analysis in the “invisible mode” may take place completely in the background. Website or app visitors are not advised that such an analysis is taking place if the user is not shown a challenge. Data processing is based on Art. 6(1)(f) of the GDPR (DSGVO): the website or mobile app operator has a legitimate interest in protecting its site from abusive automated crawling and spam. IMI acts as a “data processor” acting on behalf of its customers as defined under the GDPR, and a “service provider” for the purposes of the California Consumer Privacy Act (CCPA). For more information about hCaptcha and IMI’s privacy policy and terms of use, please visit the following links: https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms.
Hack attempts
Hack attempts (like for example failed logins) are logged with IP, User-Agent string and the submitted user-name. This data is only held temporarily to be able to prevent further hack attempts. This is a legitimate interest to maintain website security.
Contact information
Contact information can be found at https://www.sindastra.de/contact/