Privacy Policy

Last updated: December 16, 2025

This privacy policy explains how mediocris handles your data when you visit my website and complies with the General Data Protection Regulation (GDPR).

Data Controller

The data controller for this website is the individual operating mediocris. For contact information, see the Contact section below.

Intention

For as long as possible I will try to avoid any tracking, embeds and things that track you. This is meant to be a simple website sharing my thoughts. That said, I may go lazy on some things: If you want to discuss the content with me, you can do so on LinkedIn, and I’m not controlling how much of your life they harvest in the process.

What I Store

Local Storage

I use your browser’s local storage to save one piece of information:

  • Theme preference (theme): Whether you prefer dark or light mode
    • Values: "dark" or "light"
    • Purpose: Remember your theme choice between visits to improve user experience
    • Legal basis: Legitimate interest (essential website functionality)
    • Retention: Stored until you clear your browser data or manually delete it
    • Location: Stored locally in your browser only, never transmitted to servers

What I Don’t Store

No Cookies

I don’t set any HTTP cookies on your device.

No Analytics or Tracking

  • No Google Analytics
  • No tracking pixels
  • No social media tracking
  • No advertising cookies
  • No third-party analytics services

No Personal Data Collection

  • I don’t collect email addresses
  • I don’t track your browsing behavior
  • I don’t store IP addresses
  • I don’t use fingerprinting techniques
  • I don’t collect any personally identifiable information

No External Services

As a rule, if there’s a resource that I would want to provide, I will do my best to avoid embedding in favour of external links. This means:

  • No comment systems that track users
  • No social media embeds that track you
  • No external fonts that could track you
  • No CDN services that collect data

Technical Details

Server Logs

My web server may temporarily log standard information like:

  • IP addresses (for security and performance)
  • Request timestamps
  • Requested pages
  • Browser user agent strings

These logs are used only for technical maintenance and security purposes and are not analyzed for tracking.

RSS Feeds

If you subscribe to our RSS feed, no personal information is collected. RSS is a standard protocol that doesn’t require user identification.

Your Rights Under GDPR

You have the following rights regarding your data:

Data Subject Rights

  • Right of access: You can see what data is stored (only theme preference in local storage)
  • Right to rectification: You can change your theme preference anytime
  • Right to erasure: You can delete the stored theme preference anytime
  • Right to data portability: The theme preference is stored locally and accessible to you
  • Right to object: You can disable local storage in your browser settings
  • Right to withdraw consent: You can clear local storage or disable it anytime

Data Control

  • The only data I store (theme preference) is entirely under your control
  • You can clear it anytime by clearing your browser’s local storage
  • No account creation or personal information is required to use this site

Browser Settings

You can:

  • Disable local storage in your browser settings
  • Clear local storage data anytime
  • Use private/incognito browsing to prevent any local storage

Exercising Your Rights

Since all data is stored locally in your browser, you can exercise all rights directly through your browser settings. No formal request process is needed.

Changes to This Policy

If I ever add analytics, comments, or other features that collect data, I will:

  1. Update this privacy policy
  2. Clearly indicate what new data is collected
  3. Provide opt-out mechanisms where possible
  4. Notify users of significant changes

Contact

If you have questions about this privacy policy or wish to exercise your GDPR rights, you can contact me on LinkedIn.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

Technical Implementation

This site is built with Hugo (a static site generator) and hosted as static files. The minimal JavaScript I use is only for:

  • Theme switching functionality
  • Mobile menu toggle
  • Image lightbox display
  • Accessibility enhancements

None of this JavaScript communicates with external servers or collects user data beyond the theme preference stored locally.