Privacy

Controller

hello@valewnrt.com

Scope

This notice covers the website at serain.si. Serain itself runs on the servers of the people who set it up; this website has no access to such instances. Linked services such as GitHub have their own privacy notices.

Hosting and server log files

The website is hosted and delivered via the network and Workers platform of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”), acting as our processor under Article 28 GDPR. A Data Processing Agreement (the Cloudflare Data Processing Addendum) is in place. When you access the site, Cloudflare automatically processes technical information and partly stores it in log files: IP address, requested URL, HTTP method, status code, response size, user agent, referrer, and the time of the request. This is required to deliver the response, detect errors, and protect the site against attacks and abuse.

Legal basis: Article 6 (1) (f) GDPR. Our legitimate interest is the secure, stable operation of the site and the defence against abuse. Retention: log entries are kept only for the period required for that purpose.

International transfers: data may be processed in or transferred to the United States. The transfer is based on the EU–U.S. Data Privacy Framework (Commission adequacy decision of 10 July 2023; upheld by the General Court in September 2025) and, additionally, on Standard Contractual Clauses under Article 46 (2) (c) GDPR.

Counting page views

The website's server counts page views in Cloudflare Workers Analytics Engine, not in the browser. For each view only coarse categories are stored: the page, the kind of request, the page's language, the class of client (browser, search engine, AI assistant or crawler, link preview, other bot), the name of a known crawler, the host of a referring third-party website, and the country the request comes from. The IP address (not even hashed), the full user agent and parameters in the address are not stored. Views are counted, not people; individual visitors can neither be identified nor recognised. Entries are deleted after three months.

Legal basis: Article 6 (1) (f) GDPR. Our legitimate interest is learning which pages are read and how search engines and AI assistants find the website.

Cookies and similar technologies

This website sets no cookies. It does not store information on your terminal equipment and does not access information stored there: no localStorage and no comparable client-side storage technologies are used.

Fonts and embedded files

The Instrument Serif typeface is self-hosted. Script, stylesheet, images and logos also come from the same origin as this website. No connection to third parties (such as Google Fonts) is established at runtime.

Analytics and tracking

No analytics, tracking, advertising or A/B testing tool and no fingerprinting runs in the browser. No data is shared with advertising networks or social platforms.

Suggesting a connector

The form at Submit a connector sends nothing to us. When you submit it, your browser opens the page for a new issue in Serain's GitHub repository and passes what you entered in the address; you review it there before publishing the issue with your GitHub account. From that step on, GitHub's privacy notice applies.

Email contact

If you contact us by email, the information you provide (email address, message, and any attachments) is processed solely to handle your enquiry. Legal basis: Article 6 (1) (b) GDPR for pre-contractual or contractual communication, otherwise Article 6 (1) (f) GDPR. Messages are retained for as long as required to address the matter and to comply with statutory retention obligations.

Outbound links

External links on this site (for example to GitHub) lead to services of other providers. Your browser only passes on the address of this website (https://serain.si), not the page. Once you follow such a link, the privacy notice of the destination website applies.

Data security

All connections to this website are encrypted with TLS (HTTPS) and the connection is upgraded automatically (HSTS). Industry-standard security headers are set on every response, among them a Content Security Policy that allows only files from the site's own origin.

Your rights

Under the GDPR, you have the right to request access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), and data portability (Article 20). You may also object to processing based on legitimate interests at any time (Article 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise any of these rights, contact us at hello@valewnrt.com.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The competent authority for the controller is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wiesbaden.

Changes to this notice

We may update this notice to reflect changes to the website or to applicable law. The current version is always available at this URL.