Who is responsible?
Moris Finkel operates this personal website. Contact: [email protected]. Last updated: 16 October 2026.
Hosting and existing site counters
The site is hosted on Cloudflare Pages. Cloudflare processes connection information, including IP addresses and request details, to deliver and protect the site. Independent first-party counters record when a Note is opened or an Article is viewed. Their application payload contains the content identifier and title and a count; they do not set analytics cookies. These counters remain separate from Google Analytics. Hosting and these limited counters serve the legitimate interests of operating the site and understanding readership (Article 6(1)(f) GDPR).
The existing Cloudflare Web Analytics beacon also measures site performance and aggregate visits without analytics cookies. See Cloudflare Web Analytics and Cloudflare privacy information. This service and the first-party counters are independent of your optional Google Analytics choice.
Optional Google Analytics 4
Only after you choose Accept analytics, this site loads Google Analytics 4 from Google to understand visits and traffic sources. It processes online identifiers, device/browser information, page views and approximate location; your IP address is involved in communicating with Google. We remove query strings and fragments from page URLs sent by our integration and limit the referrer to its origin. We do not intentionally send names, email addresses, User IDs or article/note interaction details to Google.
The legal basis is your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG for device storage/access). Declining does not limit access to the site. Google Analytics remains off until you accept; declining sends no Google Analytics requests, including cookieless pings. Advertising personalization and Google signals are disabled in our integration.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland provides the service in the EEA. Google may process data in the United States and other countries. Google's applicable transfer mechanisms include the EU-US Data Privacy Framework for certified recipients and standard contractual clauses. See Google's privacy policy and Google's data processing terms for details.
Storage and withdrawal
The first-party local storage entry moris.analytics-consent.v1 remembers your acceptance or rejection for 180 days. GA4 uses _ga and _ga_* cookies to distinguish visits; this integration limits their lifetime to 180 days without renewal on each visit. Clearing browser storage removes your saved choice.
Use Analytics settings at the bottom of any page, then Reject analytics to withdraw. This disables collection, removes accessible GA cookies and reloads the page to stop the loaded Google code. Withdrawal does not affect processing already performed with consent. Browser restrictions may prevent remembering your choice; in that case consent applies only to the current page.
The GA4 property is configured to retain user-level and event-level data for two months, without resetting user retention on new activity. Standard aggregated reports may be retained longer by Google.
Your rights
Subject to the GDPR's conditions, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. Contact the address above. You may complain to a data protection supervisory authority, including the authority in your EU place of residence or work. For North Rhine-Westphalia, see LDI NRW.