Privacy

John Ok
Nairobi, Kenya
snowballons@protonmail.com

I collect minimal data beyond what is automatically transmitted by your browser when you visit any website:

• Technical data — IP address, browser type, device type, referring page, and request timestamps. Processed by Cloudflare (CDN and hosting provider) for security, performance, and operations. Cloudflare retains these logs for approximately 24 hours.
• Google Fonts — This site loads fonts from Google's servers. Your browser sends your IP address and the page URL to Google when requesting font files. See Google's privacy policy for how they handle this data.
• Analytics — Cloudflare Web Analytics collects anonymized aggregate metrics (pageviews, referrer, country, device) without cookies or cross-site tracking.

This site does not use advertising scripts, tracking pixels, cookies, or any form of fingerprinting. The theme preference is stored in your browser's localStorage only and is never transmitted. There are no user accounts, comment systems, or newsletter forms.

I use Cloudflare Web Analytics to understand how this site is used.

It is privacy-first by design:

• No cookies
• No fingerprinting or cross-site tracking
• No individual visitor profiles — aggregate metrics only
• Compliant with GDPR without requiring a consent banner

Under the GDPR, the lawful bases for processing are:

• Legitimate interest (Article 6(1)(f)) — Technical data and anonymized analytics are processed to operate, secure, and understand the site.
• Contractual necessity (Article 6(1)(b)) — Google Fonts are loaded to render the site as designed, which is part of the service requested by the visitor.

Data is shared only with the infrastructure providers listed above (Cloudflare, Google Fonts). I do not sell, rent, or otherwise transfer your data to third parties for any purpose.

Cloudflare retains request logs for approximately 24 hours. Cloudflare Web Analytics stores only aggregated metrics, not individual pageview records. I do not store, log, or retain any personal data on my own infrastructure.

Under the GDPR, you have the following rights:

• Right of access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction — limit processing of your data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interest

To exercise any of these rights, email snowballons@protonmail.com. I will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

If this policy changes, the "Last updated" date at the top of this page will be revised. No separate notification will be provided.