Privacy

The short version

This site is a personal homepage and blog. It has no accounts, no login, no comments, no newsletter, and no shopping cart. It does not ask you for your name, your email address, or anything else, because there is nowhere to put it. Nothing you do here is tied to an identity, and nothing is sold or shared with anyone for advertising.

What is actually collected

Analytics. The site runs Vercel Web Analytics, which counts page views without cookies and without a persistent visitor identifier. It records the page you looked at, the referring site, and coarse details like country, browser, and device type. Vercel derives a short-lived hash from the incoming request to tell one visit from another within a day; that hash cannot be reversed to you, and it is not reused across days. There is no cross-site tracking, and no profile is built. This is why the site shows no cookie banner: there is no cookie to ask you about.

Server logs. Vercel hosts the site and keeps ordinary request logs, which include IP addresses, for a short retention period. That is infrastructure, not something I query.

Local storage. Your theme preference (light, dark, or follow the system) is stored in your browser's local storage so the page does not flash the wrong colours on the next visit. It never leaves your device and it reaches no server.

What is not collected

No cookies are set by this site. There are no advertising or social-media trackers, no session recording, no heatmaps, no fingerprinting, and no third-party embeds that phone home. Images, fonts, and scripts are served from this domain.

Content loaded from elsewhere

Two sections on the home page show data pulled from the GitHub and Spotify APIs: my own contribution graph and my own recently played tracks. Both calls are made from this site's server, about me rather than about you. Even the album art is fetched and re-served from this domain, so your browser never contacts GitHub or Spotify and neither of them sees your IP address.

Your rights

Under the GDPR you can ask what personal data is held about you, and ask for it to be corrected or deleted. Given the above, the honest answer is that I hold nothing that identifies you, so there is usually nothing to hand over. If you think otherwise, email magnus.rodseth@gmail.com and I will look into it and answer.

The controller is Magnus Rødseth, Oslo, Norway. Complaints can go to the Norwegian Data Protection Authority, Datatilsynet.

Changes

If this policy changes in a way that affects what is collected, the change lands in the site's public git history along with everything else.