Privacy policy
This page describes what data this site collects, why, where it goes, and what you can do about it. The site avoids cookies, third-party trackers, and advertising by design. The site counts page views with Cloudflare Web Analytics and receives security reports from your browser. It also stores the comments you send and your messages to the contact email, if you choose to write. Each is described below.
What this site collects
Page views
The site counts page views with Cloudflare Web Analytics, a service of Cloudflare Inc., which also hosts the site. A small piece of code from Cloudflare reports which page was viewed, the page you came from, your country and how quickly the page loaded. Cloudflare states that it does not use cookies or local storage to track visitors and does not fingerprint visitors by IP address, browser details or any other data. The site sees only totals, never an individual visitor, and can view the last six months of this data. Cloudflare’s own handling of the requests is covered by its privacy notice, linked under “Where your data lives”.
Comments
Comments are moderated: each one is read and approved by the publisher before it appears. When you send a comment, the site stores the post it belongs to, the name you give, your comment, the time, and your email address if you choose to give one. The email address is never shown and is used only if the publisher needs to contact you about your comment. To limit spam, the site also stores a hash of your IP address (for an IPv6 address, of its first half, which identifies your network) combined with a secret value and the date, kept apart from your comment and deleted after 24 hours. No cookies are used.
Retention: a comment that is not approved is deleted after 30 days; a rejected comment is deleted immediately; an approved comment stays with its post until it is removed. To have your comment removed, write to stratos@laspas.gr.
Security reports
The site sends your browser a Content Security Policy: a list of the sources a page may load from. If a page tries to load something outside that list, your browser may send the site an automatic report. Each stored report contains the time, the address of the page, the rule that was triggered, the blocked address, the file and line where it happened, a short sample of the blocked code if your browser includes one, the policy in force, the browser family (for example Firefox or Chrome, with no version), the Cloudflare request identifier, and a hash of your IP address combined with a secret value and the date. Your IP address itself is not stored. Because the date is part of the hash, reports from different days cannot be linked to the same visitor. The reports are used only to find and fix errors in the site.
Retention: 90 days, after which reports are deleted automatically.
The site’s administration pages are protected by a password. When a sign-in attempt uses a wrong password, the site stores the time and a hash of the IP address it came from (for IPv6, of the first half) combined with a secret value, to stop password guessing. These records are deleted after 24 hours.
Contact
If you write to the contact email, your email address and the contents of your message are stored in the publisher’s mailbox. They are not used for anything other than replying to you, and are not shared with any third party.
Retention: Kept for as long as the correspondence remains relevant; deleted on request. Legal-hold cases (data-subject requests, supervisory-authority correspondence) follow their own retention windows as required by GDPR Article 17(3).
What this site does not collect
- No cookies are set by the site itself for any purpose.
- No analytics other than the Cloudflare Web Analytics described above (no Google Analytics, Plausible Cloud, Fathom, etc.).
- No third-party advertising. No AdSense. No retargeting pixels.
- No social-media trackers. Embedded YouTube or Vimeo players, if used, may set their own cookies on play; the site does not embed any such players by default.
- No fonts loaded from third-party CDNs (Google Fonts, Adobe Fonts). All fonts are self-hosted to keep your browsing private from font CDNs.
- No newsletter or email-list collection at this time. (A future Listmonk-based newsletter is planned for Phase 2; this page will be updated when that goes live.)
Where your data lives
| Data | Stored on | Operator | Country |
|---|---|---|---|
| Security reports | Cloudflare D1 database | Stratos Laspas (publisher) | Europe (Cloudflare’s Eastern Europe location) |
| Comments | Cloudflare D1 database | Stratos Laspas (publisher) | Europe (Cloudflare’s Eastern Europe location) |
| Page-view counts | Cloudflare Web Analytics | Cloudflare Inc. | Worldwide (Cloudflare network) |
| Contact emails | Google Workspace mailbox (Google Ireland Limited), with EU data-residency policy enforced | Stratos Laspas (publisher) | Ireland (EU) |
| Static page assets | Cloudflare Workers global edge | Cloudflare Inc. | Worldwide (CDN) |
Cloudflare’s edge nodes serve static HTML, CSS, and images. Cloudflare logs the request for security and traffic-shaping purposes per its standard policy; see Cloudflare’s privacy notice at https://www.cloudflare.com/privacypolicy/ for details.
The Google Workspace mailbox is provided by Google Ireland Limited under a Workspace business agreement. Data-at-rest is pinned to the EU under Workspace’s EU data-residency policy. Workspace contact-mail content is not used to train Google’s advertising or AI models. Google’s Workspace privacy notice is at https://workspace.google.com/terms/dpa_terms.html.
Your GDPR rights
You have the right to:
- Access the personal data the site holds about you.
- Rectify any data that is inaccurate.
- Erase your data (“right to be forgotten”).
- Restrict how the site processes your data.
- Object to processing.
- Portability of your data (receive it in a structured, machine-readable format).
To exercise any of these rights, write to stratos@laspas.gr. The site responds within 30 days under Article 12(3) GDPR.
The supervisory authority for this site is the Greek Data Protection Authority (Hellenic Data Protection Authority, Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifissias 1-3, 115 23 Athens, Greece, https://www.dpa.gr. You have the right to lodge a complaint with the Authority if you believe your data has been processed unlawfully.
Changes to this policy
If this policy changes materially, the change is dated at the bottom of this page and (for visitors who have given an email address) communicated by email when feasible.
Last updated: