Privacy Policy
Last updated: 11 May 2026 (UTC)
1. Introduction
This Privacy Policy applies to pieter.lol and all of its subdomains (collectively referred to as "this website"). It describes how visitor data is handled. Contact us at [email protected] for any privacy-related questions or requests.
2. Data collected
We do not directly collect or store personal data. This website uses Cloudflare for infrastructure and network services. As part of this, Cloudflare may process the following data on our behalf for strictly technical purposes such as security, performance, and abuse prevention. This data is retained for a limited period of time and is not sold or used for advertising:
- IP address
- Browser and device information (user agent)
- Request metadata such as the URL accessed, HTTP method, referrer URL, and timestamp
- Cookies set by Cloudflare for security purposes
We may additionally use Umami, a self-hosted, open-source analytics tool, to understand general usage patterns on this website out of personal interest in how the site is used. Umami is designed from the ground up to be privacy-preserving: it collects no personally identifiable information, uses no cookies, performs no cross-site tracking, and is GDPR compliant by default. All data is anonymised and no individual visitor can be identified. It is never used for advertising, profiling, or any commercial purpose.
If enabled, Umami may collect the following anonymised, aggregated information, and no more:
- Pages visited
- Referrer URLs (where you came from)
- Outbound link clicks
- Browser and operating system type
- Device type (desktop, mobile, tablet)
- Country of origin (derived from IP address; the IP address itself is not stored)
3. Legal basis (GDPR)
Processing via Cloudflare is based on our legitimate interest (Article 6(1)(f) GDPR) in operating a secure and performant website. We have assessed that this interest is not overridden by visitors' fundamental rights, given the limited scope of data processed, the strictly technical purpose it serves, and the fact that Cloudflare does not sell or use this data for advertising.
Processing via Umami is based on our legitimate interest (Article 6(1)(f) GDPR) in understanding general usage patterns on this website. Given that no cookies are used, no IP addresses are stored, no individuals can be identified, and all data is aggregated and self-hosted, we have assessed that this interest is not overridden by visitors' fundamental rights.
4. Cookies
We do not set cookies ourselves. Cloudflare may set technically necessary cookies for security purposes. These are exempt from consent requirements under the Dutch Telecommunications Act (Telecommunicatiewet). Umami does not use cookies.
5. Third-party processing and data transfers
Cloudflare acts as a data processor on our behalf. Cloudflare operates a global network and may process data outside the European Economic Area, including in the United States. Cloudflare participates in the EU–U.S. Data Privacy Framework and relies on Standard Contractual Clauses and other appropriate safeguards under GDPR Chapter V for such transfers. Cloudflare does not sell personal data processed on behalf of its customers.
For further information, refer to Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy.
Umami is self-hosted on our own infrastructure. Analytics data is not transferred to or shared with any third party, including advertisers or data brokers.
6. Your rights
Under GDPR and Dutch law (UAVG), you have the right to access, rectify, erase, restrict, or object to the processing of personal data concerning you, as well as the right to data portability.
As we do not directly store personal data, most requests will need to be directed to Cloudflare. Because Umami does not store any data that could identify you individually, erasure or access requests regarding Umami analytics are not applicable in practice. For requests directed at us, contact [email protected].
You have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at https://autoriteitpersoonsgegevens.nl.
7. Changes to this policy
This policy may be updated periodically. The date at the top of this page reflects the most recent revision.