~ /www/0xflo.dev

Data policy

This website is a personal, non-commercial project. I aim to operate it with as little collection and processing of personal data as possible. I do not use visitor analytics, advertising, or tracking.

This Privacy Policy explains how personal data is processed when you visit this website or contact me by email.

1. Data Controller

The data controller responsible for processing personal data is:

Florian Schuttkowski
Korntaler Straße 15/1
71636 Ludwigsburg
Germany

Email: mail@0xflo.dev

2. Website Hosting and Server Access Logs

This website is hosted by:

Jonas Pasche (Uberspace)
Kaiserstraße 15
55116 Mainz
Germany

Website: https://uberspace.de

When you visit this website, certain technical connection data is processed so that your browser can receive the requested content.

This includes your IP address. Server access logs may also contain the following information:

Uberspace truncates IP addresses in its server access logs. For IPv4 addresses, only the first 16 bits are retained; for IPv6 addresses, only the first 32 bits are retained. The remaining bits are set to zero.

This data is processed to deliver the website, maintain its security and reliability, and identify and resolve technical errors.

Legal basis: Article 6(1)(f) of the General Data Protection Regulation (GDPR). My legitimate interest is to ensure the secure, functional, and reliable operation of this website.

Retention of Server Access Logs

Server access logs are automatically rotated and deleted by the hosting provider.

The retention period is determined by the hosting provider’s configured log file size limits and subsequent time-based deletion intervals. These technical settings may change as part of updates to the hosting infrastructure.

I have concluded a Data Processing Agreement with Uberspace in accordance with Article 28 GDPR.

Further information about the hosting provider:

https://uberspace.de/de/about/privacy/

3. Contact by Email

You can contact me at mail@0xflo.dev.

If you send me an email, I process the information you provide, including:

I use this information to process and respond to your message and for any necessary follow-up communication.

Legal basis: Article 6(1)(f) GDPR. My legitimate interest is to receive, process, and respond to incoming inquiries.

Contacting me is voluntary. However, without the necessary contact information, I may not be able to respond to your inquiry.

Email Hosting and International Data Transfers

I use Fastmail Pty Ltd, based in Australia, to receive, store, and send emails.

My Fastmail account is configured to use the EU data residency region. Primary mailbox data is stored on servers in Amsterdam, the Netherlands.

However, Fastmail also maintains a replica of the data in the United States. Backups, logs, and certain technical systems are also located in the United States.

I have entered into a Data Processing Agreement (DPA) with Fastmail. This agreement provides for the use of the European Commission’s Standard Contractual Clauses for relevant international data transfers.

Further information:

https://www.fastmail.com/policies/privacy/

https://www.fastmail.com/policies/dpa/

Email Retention

I retain personal data from email correspondence only for as long as it is necessary to handle the relevant matter, for necessary follow-up communication, or where statutory retention obligations or other lawful grounds justify continued retention.

Afterwards, I delete the relevant messages from my active mailbox.

Additional technical retention, such as storage in the email provider’s backup systems, is governed by the provider’s deletion and backup procedures.

4. Cookies, Tracking, and External Content

This website does not use cookies for analytics or advertising, or technologies designed to identify or track visitors.

I do not create visitor analytics or user profiles for advertising purposes.

Fonts, stylesheets, scripts, and images are served from this website’s own web server. No external third-party content is embedded to display the website.

Accordingly, no consent for tracking technologies is requested.

5. Your Data Protection Rights

Subject to the applicable legal requirements, you have the following rights:

Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation, pursuant to Article 21 GDPR.

You can exercise your rights by contacting me at mail@0xflo.dev.

Right to Lodge a Complaint

You also have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Article 77 GDPR.

The supervisory authority responsible for my place of residence in Baden-Württemberg is:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

(Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)

Heilbronner Straße 35
70191 Stuttgart
Germany

Website: https://www.baden-wuerttemberg.datenschutz.de

6. Automated Decision-Making

I do not use automated decision-making, including profiling within the meaning of Article 22 GDPR, in connection with this website.

7. Changes to This Privacy Policy

If the processing of personal data on this website changes, I will update this Privacy Policy accordingly.

Last updated: October 11, 2026