Privacy.

Who runs this site

simondoes.it is a personal site operated by Simon Berriman. The full legal notice, including the postal address, is on the Impressum page. For anything on this page you can write to hello@simondoes.it.

Hosting and server logs

The site is a set of pre-built static pages hosted by Vercel Inc. (United States). Like any web server, the host records technical data when a page, image or font is requested: the IP address making the request, the date and time, the URL requested, the referring page, and the browser’s user-agent string.

This happens for every visitor and cannot be switched off, because it is how the page reaches you at all. It is used to deliver the site, to keep it available and to diagnose faults and abuse. The legal basis is Art. 6 (1) (f) GDPR: a legitimate interest in operating a working, secure website. The host keeps these logs for a limited period and then deletes them; they are not combined with anything else, and no profile is built from them.

Vercel Inc. is based in the United States, so this processing can involve a transfer outside the EU. Such transfers are covered by the European Commission’s standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework. Their policy is at vercel.com/legal/privacy-policy.

Analytics, only if you say yes

This site can use Google Analytics 4 to see, in aggregate, which pages people read and how they arrived. It is off by default.

Until you press “Accept analytics”, nothing belonging to Google is loaded. No script is fetched from googletagmanager.com, no request is sent to google-analytics.com, and no analytics cookie is written. If you press “Reject”, or simply ignore the banner, it stays that way on every page and every visit.

If you accept, the following applies:

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on behalf of Google LLC.
• Property: measurement ID G-8CWH19EVGT.
• What is collected: the pages you view and when, the page that referred you, an approximate location derived from your IP address (country and region, not an address), and general device and browser information such as screen size, operating system and language.
• Cookies: _ga and _ga_8CWH19EVGT, both set for up to two years. They hold a randomly generated identifier so that repeat visits can be recognised as repeat visits. They are written only after you accept.
• Purpose: understanding aggregate use of this site, so that the writing and the pages can be improved. That is all it is for.
• Legal basis: your consent, Art. 6 (1) (a) GDPR, together with § 25 (1) TDDDG for storing and reading information on your device.

Google states that it uses the IP address to derive an approximate location and does not record it in Analytics reports. Google may process this data on servers in the United States. Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision in July 2023. Even so, a transfer to a third country carries risks that cannot be entirely excluded, which is one reason this is a choice rather than a default. Google’s own policy is at policies.google.com/privacy.

No Google advertising product is used here. Google Ads, Google Signals, advertising personalisation, remarketing, conversion tracking and audience sharing are not enabled on this property, and no data is used to build an advertising profile of you.

Changing your mind

You can withdraw consent at any time, with effect for the future, through Privacy settings in the footer of every page. Withdrawing stops any further collection immediately, and this site deletes the _ga and _ga_8CWH19EVGT cookies it can reach from your browser. Withdrawal does not affect the lawfulness of what was collected while consent was in place. You can also install Google’s browser opt-out add-on to block Analytics everywhere.

What is stored on your device

Your answer to the analytics question is kept in your browser’s local storage under the key sdi.consent.v1. It holds the choice itself and the time you made it, nothing more. It never leaves your device and is never sent to this site’s server, which is precisely why local storage was used rather than a cookie.

Storing it is strictly necessary to provide a function you asked for — not being asked the same question on every page — so it does not itself require consent, under § 25 (2) No. 2 TDDDG. Clearing your browser’s site data removes it, and the banner will ask again.

Apart from that, and the Analytics cookies described above once you have accepted them, this site stores nothing on your device.

Fonts, images and embeds

Every font and every image is served from simondoes.it itself. There is no Google Fonts request, no content delivery network, no embedded video or social widget, and no third-party iframe anywhere on this site. Opening a page here does not tell any company other than the host that you did.

If you email

The address on this site is an ordinary mailto link. If you write, your address and whatever you put in the message are processed in order to read and answer it, on the basis of Art. 6 (1) (b) or (f) GDPR depending on what you are writing about. Messages are kept for as long as the matter is live, and then deleted.

Links off this site

Pages here link out to other places — GitHub, X, Spotify, and the products described under Work. Those are plain links: they load nothing until you click them, and once you do, the privacy policy of that site applies rather than this one.

The writing feed

The RSS feed is a static file. Fetching it produces the same server log entry as any other page and nothing else; there is no tracking pixel and no subscriber list.

What this site does not do

There are no user accounts, no login, no newsletter, no shop, no payment processing, no comment form, no contact form, no advertising, no A/B testing, no session recording or heatmaps, no social media tracking pixels, and no profiling or automated decision-making within the meaning of Art. 22 GDPR. No data is sold or shared for anyone else’s marketing.

Your rights

Under the GDPR you have the right to ask for access to the personal data held about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to have its processing restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on legitimate interests (Art. 21).

Where processing rests on consent, you can withdraw that consent at any time under Art. 7 (3) GDPR — for analytics, through Privacy settings in the footer.

To exercise any of these, write to hello@simondoes.it. In practice this site holds very little: unless you have emailed, the only data connected with you is the host’s short-lived server log, and, if you accepted analytics, an anonymous identifier in Google’s reports.

You also have the right to complain to a data protection supervisory authority under Art. 77 GDPR. You may complain to the authority in the EU country where you live or work, or to the one competent for the operator.

Changes

If what this site does changes, this page changes with it and the date at the top moves. There is no version history: the page above describes what the site does today.