Privacy policy

Controller: 20Vision GmbH, Anisgasse 30, 1220 Wien, Österreich (Austria) — [email protected].

No tracking cookies of our own

You can read everything without an account. We use no analytics cookies; the only cookie we set ourselves is the sign-in session cookie if you choose to sign in.

Hosting, delivery and statistics

The site is hosted by Vercel Inc. and delivered through Cloudflare, Inc. (content delivery and protection against attacks). Both process connection data (IP address, requested URL, time, browser) on our behalf to deliver the site and keep it secure; we only see aggregated statistics (page views per page and country). Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Both may process data in the USA under the EU-US Data Privacy Framework.

Usage statistics (our own, cookieless)

We collect anonymous usage statistics without cookies with our own analytics service (operated by 20Vision GmbH, hosted on Cloudflare and our own server in the EU): pages viewed, clicks, scroll depth and reading time, form submissions (never the values you type), errors, referrer, device type and approximate location derived from the IP address. Nothing is stored on or read from your device; the IP address is used only transiently to form a hash that rotates daily and to derive the country/city, and is never stored. If you are signed in or subscribe, these usage events are linked to your account (for the newsletter: to a keyed hash of your email address, the address itself is not stored in the analytics system), so we can see which explainers subscribers read. Legal basis: legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR) and, for account holders, the contract (Art. 6(1)(b)).

Advertising (Google AdSense)

We show ads through Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may use cookies and similar technologies to show ads and measure them. In the EEA, UK and Switzerland we ask for your consent through Google's consent message before personalised ads or ad cookies are used (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); you can change your choice at any time via the “Privacy and cookie settings” link the consent tool shows. Without consent Google may show limited, non-personalised ads. More: How Google uses information from sites that use its services.

Accounts, newsletter and comments

If you create an account or subscribe, we store your email address, sign-up and confirmation time, newsletter preference, likes and comments (legal basis: contract, Art. 6(1)(b) GDPR, and consent for the newsletter, Art. 6(1)(a)). Sign-in uses a one-time email link and a session cookie that is strictly necessary for staying signed in. The newsletter uses double opt-in and every email has a one-click unsubscribe link. Comments are public under the first part of your email address and are checked by an automated AI moderation step before they appear. Data is stored with Neon Inc. (database, EU region Frankfurt) and emails are sent through Resend (Plus Five Five Inc., EU region) as processors. You can delete your account and all related data at any time on the account page.

Payments

If you buy a sponsorship or support us, the payment is processed by Stripe on Stripe's own pages; we receive your name, email and payment status, which we keep as required by tax law (7 years).

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Contact us at [email protected]. You may also complain to the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).