Privacy
This website sets no cookies, uses no analytics or advertising services and loads nothing from other servers. What it still processes is listed here. The German version of this page is the authoritative one.
Controller
Timo Böwing, address in the imprint, email timo.boewing@posteo.de.
When you visit
The web server logs every request: your IP address, the time, the address requested, the status code, the amount of data sent and the headers your browser sends, among them browser and operating system, language and the page you came from. This serves the operation and security of the website, for example to detect attacks. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is a secure, working server.
The full log is closed daily and deleted no later than 8 days after an entry.
For visitor statistics, an anonymous copy is made daily: the IP address is shortened (the last number of an IPv4 address, the last 80 bits of an IPv6 address), and of the headers only the browser and operating system family remain, such as “Firefox” and “macOS”. This copy cannot be traced back to you and is kept without a time limit. The country for the statistics is looked up on the server itself from the shortened address.
Both versions are evaluated only on the server itself, with self-hosted software (CaddyShack); apart from the hosting provider named below, nobody has access to them. I use the full log only for operation and security; statistics come solely from the anonymous copy.
Hosting
The server is run by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its data centre in Nuremberg. Hetzner processes the data on my behalf (Art. 28 GDPR).
Stored in your browser
If you choose Light or Dark, your browser remembers it locally (localStorage). It is not sent anywhere, and “Auto” removes it.
In the Museum, closing the notice bar is remembered for the current tab only (sessionStorage) and is forgotten when you close the tab. It is not sent anywhere either.
Links to other sites
Links to GitHub, Instagram, Threads or snapsbytimo.de open those sites only when clicked; their privacy policies apply there. The Unterlumen install commands (huepattl.de/unterlumen/install) forward to GitHub, where the program is downloaded from. The archived sites in the Museum link to the Internet Archive (web.archive.org) and other sites; those, too, open only when clicked.
If you write to me, I use your address and message only to reply, and delete them once that is done. My mailbox is hosted by Posteo e.K., Berlin. The legal basis is Art. 6(1)(f) GDPR.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and to object to processing (Art. 21). Send me an email for any of them. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
As of October 2026