Privacy Policy
We collect as little as possible: no accounts, no cookies, no advertising, no tracking across sites. This page explains what does happen when you visit, as required by Art. 13 GDPR. The German version is authoritative.
1. Controller
The controller under the GDPR is the operator of this website, reachable by email at me@exactee.com. Further details are in the imprint. We have not appointed a data protection officer, as we are not required to.
2. Hosting and delivery (Cloudflare)
This site is hosted on Cloudflare Pages and delivered through Cloudflare’s network (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open a page, your browser necessarily transmits technical data: IP address, date and time, requested URL, referrer URL, browser and operating system (user agent) and the amount of data transferred. Cloudflare processes this to deliver the site and to protect it against attacks and abuse (e.g. DDoS protection, bot detection).
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and fast delivery of the website. Cloudflare acts as our processor under its Data Processing Addendum (Art. 28 GDPR). We do not see or store these server logs ourselves.
3. Web analytics (Cloudflare Web Analytics)
To understand how many pages are viewed and how fast they load, we use Cloudflare Web Analytics. Cloudflare adds a small script (static.cloudflareinsights.com/beacon.min.js) to each page. According to Cloudflare, the script:
- sets no cookies and uses no localStorage, sessionStorage or other browser storage;
- does not fingerprint or track you across visits or across websites;
- reads performance and timing data from your browser’s Performance API for the page you are viewing and sends it together with the page URL, referrer and browser information (user agent) to Cloudflare;
- receives your IP address only as part of the normal request; Cloudflare states it discards the IP address at the nearest data centre and does not store it in its databases or logs.
We only see aggregated statistics (e.g. page views, referrers, countries, browsers, loading times), not individual visitors.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is measuring the reach and technical performance of our content in a privacy-friendly way. Where reading information from your device is concerned, § 25 TDDDG applies (see section 7). Sources: Cloudflare Web Analytics, Cloudflare documentation.
4. Recipients
Recipient of the data described in sections 2 and 3 is Cloudflare, Inc. as our processor. We do not sell or share personal data with anyone else, and we use no advertising networks or social media plugins.
5. Transfer to third countries
Cloudflare processes data in its global network, including in the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to certified US companies are covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, Cloudflare’s Data Processing Addendum includes the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). See Cloudflare’s GDPR information and Cloudflare’s privacy policy.
6. Contact by email
If you email us at me@exactee.com, we process your address and message only to answer you (Art. 6(1)(f) GDPR; Art. 6(1)(b) GDPR if it concerns a contract). We delete the correspondence once your request is settled, unless statutory retention periods apply.
7. Device access (§ 25 TDDDG)
We store nothing on your device and set no cookies. The analytics script reads technical performance data in your browser. If you don’t want that, you can object at any time (see section 9) by blocking static.cloudflareinsights.com with a content blocker or by disabling JavaScript; the site works fully without it, except the brew calculator, which needs JavaScript.
8. Retention
Cloudflare deletes or anonymises technical delivery and security data according to its own retention periods; the IP address received by the analytics script is discarded immediately according to Cloudflare. We keep only aggregated statistics without personal reference. Emails are deleted as described in section 6.
9. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3)). To exercise your rights, write to me@exactee.com.
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then stop processing unless there are compelling legitimate grounds. Simply email me@exactee.com.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your residence, workplace or the place of the alleged infringement.
10. No obligation, no automated decisions
You are not legally or contractually obliged to provide personal data. Without the technical data in section 2 the website cannot be delivered. We do not use automated decision-making or profiling (Art. 22 GDPR).
11. External links
Our pages link to other websites, for example Booktun.ing. These are ordinary links: nothing is loaded from those sites until you click, and their own privacy policies then apply.
Last updated: 13 October 2026