Privacy
What this site records about your visit, why, and how to stop it. Nothing is recorded for this page itself.
Who is responsible
Sebastian Bartmann, hey@bartmann.xyz. I run this site and the sites named below myself.
The consent panel
On your first visit a panel asks whether this site may recognise your browser on later visits and on my other sites. You choose Accept or Reject; the page cannot be used until you have chosen. You can change your choice at any time with Privacy choices in the footer of every page.
Until you have chosen, only the fact that the panel was shown is counted: the page path, the time and random technical IDs for this page load and this panel, together with the values described under counting without cookies. Nothing else about your visit is sent until you choose. If you leave without choosing, nothing more is recorded.
If you accept
The site stores a cookie with a random visitor ID, so that your later visits can be linked. Your browser language and the width of the browser window are recorded as well. Your choice lasts 12 months; after that, or when the panel text changes, you are asked again and a new visitor ID is issued. Every new consent also gets a new visitor ID. Legal basis: your consent (Art. 6(1)(a) GDPR).
If you reject: counting without cookies
Only your choice is stored in your browser, no identifier. Visits are still counted: for each request the server computes a code from your IP address (for IPv6 only the first half, the network part), your browser identification (the user agent string) and the site name, using a secret key that changes every day and is deleted after the day has passed. This code lets me group the page views of one browser on this site within one day. It cannot be used to follow you across days or across sites, and it does not identify you. Your IP address is never stored. The same counting applies to the panel display described above. Legal basis: my legitimate interest in knowing how this site is used (Art. 6(1)(f) GDPR).
What is recorded
After your choice, for each page view and for a few clicks (the email link, links to my projects):
- time, page path and the event name (for example a page view or a click on the email link)
- campaign parameters in the address (
utm_*), if present; no other parts of the address - the page you came from: for other websites only their address, for example
https://www.google.com, for this site the path - your browser identification (user agent string) and the daily code described above
- only if you accepted: the visitor ID, browser language and window width
This site has no search or input forms. On requestsearch.com and thirdpartycheck.com the search terms and checked domains entered there are recorded; their privacy pages describe this.
Cookies and browser storage
All cookies are set by the server and are bound to the exact host name.
| Name | Set on | Purpose | Lifetime |
|---|---|---|---|
__Host-dl_c |
bartmann.xyz | Stores your choice (accept or reject), the panel text version and the month of the choice. Set for both choices. | 12 months |
__Host-dl_v |
bartmann.xyz | Random visitor ID, signed by the server. Only after you accept. | Until your consent expires (12 months, not extended); deleted when you reject or withdraw |
__Host-dl_g |
id.datalayer.solutions | Random ID that links your visitor IDs on my sites (see below). Only after you accept. | 12 months from its last use |
After you accept, the site also keeps a short marker (dl_gs) in the
browser's session storage, which is cleared when you close the tab. The dark mode
switch stores your colour preference in your browser's local storage; it is never
sent anywhere.
Recognition across my sites
I also run thirdpartycheck.com, requestsearch.com and datalayer.solutions. Each site asks separately. Your visits are linked between two of these sites only if you accepted on both. Two ways are used:
- When you follow a link from one of these sites to another, a one-time random code
is added to the address (
?_dl=…) and removed again on arrival. - The cookie
__Host-dl_gon id.datalayer.solutions holds a random ID that each site you accepted on can match once per browser session. This cookie is only used once cross-site recognition through id.datalayer.solutions is switched on; browsers that block third-party cookies prevent it.
Both only show that the same browser was probably used, not who you are.
Where the data goes and how long it is kept
The records are written on the web server that runs this site (rented from Hetzner) and kept there for 14 days. During that time they are copied to my own server at home, kept there for 24 months and then deleted. Daily totals per site, which contain no data about individual visitors, are kept after that.
The data is not passed on or sold to anyone, and no third-party analytics or advertising tools are used. The pages load no resources from third parties: fonts, scripts, styles and images all come from bartmann.xyz itself. The only other host your browser contacts is my own id.datalayer.solutions: for the cross-site cookie described above, only after you accept, and when you use the Forget me across sites button below.
Withdraw your consent
Use Privacy choices in the footer of any other page and choose Reject, or use the button below. Withdrawal applies to this site only; the visitor ID cookie is deleted and later visits are counted without cookies as described above.
To stop your visits from being linked across my sites, also delete the shared cookie on id.datalayer.solutions:
Access and erasure
Write to hey@bartmann.xyz to ask what
is stored about you or to have it deleted. I store no names or contact details with
these records, so I can only find yours by their visitor ID: please include the value
of the __Host-dl_v cookie for bartmann.xyz (visible in your browser's
developer tools) before you withdraw. Records counted without cookies cannot be traced
back to you, because the daily key that produced their code no longer exists.
Complaints
You have the right to complain to the Austrian data protection authority (Österreichische Datenschutzbehörde, dsb.gv.at).