Controller
Philipp Storl, based in the Chemnitz / Leipzig area, Germany, is the controller responsible for the personal data processed on this site (philipp.fyi). You can reach me through the contact form.
What this site collects
Contact form
When you submit the contact form, I collect your name, email address, and the message you write. This data is used solely to respond to your inquiry.
- Legal basis: Art. 6(1)(a) GDPR, your consent, given by submitting the form.
- Recipient: Netlify, Inc. (opens in a new tab), which stores form submissions on my behalf as a processor (Netlify Forms).
- Retention: kept for as long as needed to respond to and follow up on your inquiry, then deleted. You can ask me to delete it sooner at any time.
Hosting and server logs
This site is hosted on Netlify. Like most hosting providers, Netlify's infrastructure automatically logs technical request data (for example IP address, requested URL, timestamp, and user agent) for a limited time, to operate, secure, and troubleshoot the site.
- Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in operating a secure, reliable website.
- Recipient: Netlify, Inc.
Performance monitoring
Netlify's hosting platform includes a built-in Real User Monitoring beacon, served from this domain, that reports aggregate performance metrics (for example page load times) to Netlify. It doesn't use cookies or any persistent identifier, and isn't used for advertising or to track you across other sites.
- Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in monitoring and improving site performance.
- Recipient: Netlify, Inc.
CSP violation reports
This site's browser security policy asks your browser to report any blocked or unexpected script/style activity. If your browser sends one, it's stored (via Netlify Blobs) for up to 30 days so it can be investigated, then automatically deleted.
- Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in detecting and fixing security issues.
- Recipient: Netlify, Inc. If a Slack alert channel is configured, a summary of the report (including the blocked/document URL and your browser's user agent) is also forwarded there so I can investigate promptly.
International data transfers
Netlify, Inc. is based in the United States. Where data is transferred outside the European Economic Area, Netlify relies on the Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework as a safeguard. See Netlify's privacy policy (opens in a new tab) for details.
Cookies and local storage
This site doesn't use cookies and doesn't run any third-party advertising or tracking scripts. The performance-monitoring beacon described above uses neither. Separately, this site stores exactly one preference, your light/dark theme choice, in your browser's local storage. That value never leaves your browser and isn't linked to you personally.
Your rights
Under the GDPR, you have the right to:
- access the personal data I hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data deleted (Art. 17)
- restrict how your data is processed (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw consent at any time, without affecting processing that already happened (Art. 7(3))
To exercise any of these, use the contact form. You also have the right to lodge a complaint with a supervisory authority, in particular the Sächsische Datenschutz- und Transparenzbeauftragte (opens in a new tab) (the data protection authority for Saxony, Germany, where I'm based), or the authority in your own country of residence.
Changes to this policy
I'll update this page if what this site collects or how it's processed changes. Last updated: September 15, 2026.