Privacy policy

September 2026

Controller

The controller for data processing on this personal website under the GDPR is Irfan Ali, Berlin, Germany.

Hosting and server logs

This website is hosted by Cloudflare, Inc., USA. When you visit, the host automatically processes technical data your browser sends: IP address, date and time of the request, the page requested, referrer URL, and browser and operating system.

This is necessary to deliver the site securely and reliably (Art. 6(1)(f) GDPR). Where data is processed outside the EU, transfers are based on the EU Standard Contractual Clauses (Art. 46 GDPR).

Audience measurement

To see which pages are read, the server counts page views anonymously. For each page view it stores only the page address, the country derived from the request, the referring website, and whether a mobile or desktop device was used. No IP addresses, cookies, or device identifiers are stored, nothing is read from or saved on your device, and no profiles are built. The counts are kept in Cloudflare Workers Analytics Engine.

Legal basis: Art. 6(1)(f) GDPR, my interest in understanding which content is useful. You can object at any time by email.

Contact form and email

If you contact me via the form or by email, I process the data you provide (name, email address, and your message) only to read and answer it (Art. 6(1)(f) GDPR).

Form messages are delivered to my inbox through Cloudflare Email Routing (Cloudflare, Inc., USA), on the basis of the EU Standard Contractual Clauses. I delete your data once the conversation is finished.

Cookies, fonts, and local storage

Fonts are served from this website's own server; no connection to Google or other font providers is made.

This site sets no cookies and loads no tracking scripts. Your light or dark mode choice is stored in your browser's local storage so the site remembers it. It never leaves your device and is strictly necessary for the function you requested (§ 25(2) TDDDG).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing (Art. 15-21 GDPR). To exercise them, email me.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.