Privacy and cookie notice

Controller and contact

The controller is Artem Istranin, Berlin, Germany. For privacy questions or requests, email artem@istranin.dev.

Essential website operation

The site and its database are hosted on Google Cloud. Server requests necessarily include technical data such as your IP address, requested URL, time, and browser information. This data is processed to deliver and secure the site on the basis of legitimate interests in reliable and secure operation (Article 6(1)(f) GDPR).

Django sets a csrftoken cookie to protect form submissions. The privacy control stores your choice in your browser for up to six months. A random consent-receipt identifier and the notice version are stored with an affirmative choice so that the site can apply and demonstrate the preference you requested. These items are necessary for security or privacy-preference operation.

Optional analytics measurement

Optional measurement runs only after you agree to optional statistics. The legal basis is your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). You can refuse without losing access to the site and withdraw consent at any time with “Privacy choices” in the footer.

First-party analytics

The site records page paths, page type, the highest blog read-depth reached, selected links and course enrollment clicks, a random browser identifier, IP address, external referrer, and user agent. Staff sessions and obvious bots are excluded. Raw events are deleted after 90 days; aggregate reports without raw IP addresses may be kept for longer-term reporting. Analytics reports are restricted to staff users.

Before optional measurement starts, the site stores a minimized consent receipt containing a random receipt identifier, the exact notice version and choices presented, and the grant time. Analytics events reference that identifier. Withdrawal time is added when you later refuse measurement. The receipt itself does not contain your IP address, browser identifier, or user agent and is retained only as long as needed to demonstrate consent for the associated measurement and related legal obligations.

Google Analytics and Google Tag Manager

After consent, Google Tag Manager loads Google Analytics 4 for audience and form-interaction measurement. Google Analytics may set _ga and _ga_* cookies for up to two years and process device, browser, approximate location, session, and interaction data. Analytics storage is enabled only with measurement consent. Advertising storage, advertising user-data signals, and personalized advertising remain disabled. Google Ireland Limited is the service provider, and processing may involve transfers outside the EEA under the safeguards described by Google.

See Google’s privacy policy and Google’s Ads Data Processing Terms.

Newsletter subscriptions

If you subscribe, the site stores your email address and subscription time so it can send the updates you requested. The legal basis is your consent. The address is kept until you unsubscribe or ask for deletion; every newsletter should provide a way to unsubscribe.

Embedded media and external links

Course previews and videos embedded in blog articles show a local placeholder first. YouTube, Vimeo, or another external player is contacted only after you choose to load that specific video. Blog YouTube embeds use its privacy-enhanced domain. Loading an external player shares technical connection and device data, including your IP address, with that provider under its own privacy terms. This per-video choice is separate from optional analytics consent. External links, including social networks, Udemy, and YouTube, are governed by the destination provider’s privacy practices once you follow them.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or objection, and you may withdraw consent for future processing. You may also lodge a complaint with a data protection authority, including the Berlin Commissioner for Data Protection and Freedom of Information.