Terms & privacy

The site is operated by Daan Vrieling, based in the Netherlands. For privacy questions, email [email protected].

I only collect information needed to run this site.

• Contact form. If you send a message, I receive your name, email address, and message. That content is emailed to me. It is not saved in the website database.
• Abuse prevention. The contact form is rate limited. Your IP address and email address are used as short-lived keys so the form cannot be flooded. Those keys expire after the limit window (one hour by default).
• Performance and page views. The site uses Vercel Speed Insights and Vercel Web Analytics. Those services receive technical data such as the page URL, referrer, country, browser, device type, and performance timings. They are not used to build an advertising profile.
• Hosting logs. The host (Vercel) may log requests, including IP address and user agent, to operate and secure the site.

The public site does not set marketing or account cookies. Vercel Web Analytics and Speed Insights run without cookies. Signing in to the CMS at /admin sets a session cookie for that login only. Visitors do not need an account to read the site or use the contact form.

I process contact details so I can reply to you. I process IP addresses and rate-limit keys to keep the form usable. I process performance and page-view data to see whether pages load properly and which pages are used. Under the GDPR, that is based on steps you take when you ask me to contact you, and on my legitimate interest in running and protecting the site.

I use a few processors to host and deliver the site:

• Vercel — hosting, Speed Insights, and Web Analytics.
• The site mail server — delivery of contact-form messages.
• Upstash — short-lived rate-limit keys, when that service is configured. Otherwise those keys stay in server memory and are discarded when the instance goes cold.
• Neon — the database for CMS content and admin accounts, not for messages you send through the contact form.

Some project images load from GitHub or Imgur. Those services receive your IP address when your browser requests the image. Links to GitHub, X, npm, and other sites are third parties with their own policies.

Some of these providers are outside the European Economic Area. Where they transfer personal data, they do so under their own safeguards, such as standard contractual clauses.

I keep contact emails for as long as I need them to handle your message and any follow-up, then delete them. Rate-limit keys expire automatically with the limit window. Hosting and performance data are kept according to those providers’ retention periods.

If you are in the EEA or UK, you can ask for access, correction, deletion, or a copy of your personal data, and you can object to or restrict processing based on legitimate interests. Email [email protected]. You can also lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

This site is not directed at children, and I do not knowingly collect personal data from anyone under 16.