Privacy Policy
Last updated: May 2026
This policy explains what personal data this website collects, why, and what rights you have. It is written in English for an international audience. As the site is operated from within the European Union, it follows the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
The controller responsible for data collected on this site is:
Corbin Stack
Am Kühberg
64720 Michelstadt
Germany
For full legal contact details, see our Legal.
Cookies and consent
When you first visit, you are shown a consent banner (provided by Cookiebot) that lets you accept or reject categories of cookies and tracking. Strictly necessary cookies that make the site function are always active; all other cookies and tracking tools load only after you give consent, and you can change or withdraw your choice at any time via the banner.
We use the following cookie categories:
- Necessary — required for the site to work (e.g. remembering your consent choice, secure browsing).
- Statistics — help us understand how visitors use the site, anonymously. This includes Hotjar (see below). These load only with your consent.
If you leave a comment, you may opt in to saving your name, email address, and website in a cookie for your convenience, so you don’t have to re-enter them next time. These last one year.
Hotjar (anonymous usage analytics)
We use Hotjar to understand how visitors interact with our pages — for example, which sections are read and where people click — so we can improve the site. Hotjar is configured to anonymize IP addresses and does not identify you personally. Hotjar loads only after you consent via the cookie banner. You can read Hotjar’s privacy information at https://www.hotjar.com/legal/policies/privacy/ and opt out at https://www.hotjar.com/legal/compliance/opt-out/.
Google Search Console
We use Google Search Console to see how this site appears in Google search results (for example, which search terms bring visitors here). This works from aggregated Google search data and does not place tracking cookies on your device through this site, nor does it identify you personally.
Email newsletter (MailPoet)
If you choose to sign up for our mailing list, we collect your email address (and name, if you provide it) to send you updates. We use MailPoet, and emails are sent from our own server. We use double opt-in: after signing up, you receive a confirmation email and are only added once you click to confirm. You can unsubscribe at any time using the link in any email, after which your address is removed. We do not sell or share your email address.
Comments
When you leave a comment, we collect the data in the comment form, plus your IP address and browser user-agent string to help detect spam. Comments may be checked through an automated spam-detection service. An anonymized hash of your email address may be sent to the Gravatar service to check whether you use it; Gravatar’s policy is at https://automattic.com/privacy/. Once approved, your profile picture is visible alongside your comment.
Media
If you upload images to the site, avoid images with embedded location data (EXIF GPS), as visitors could download and extract that data.
Embedded content from other sites
Pages may include embedded content (videos, images, etc.) from other websites. Such content behaves as if you had visited the other site directly, and those sites may collect data, set cookies, and track your interaction with that content.
How long we keep your data
- Comments and their metadata: kept indefinitely so follow-up comments can be approved automatically.
- Newsletter data: kept until you unsubscribe.
- Hotjar data: retained according to Hotjar’s retention period [confirm in your Hotjar settings — typically up to 365 days].
Your rights
Under the GDPR you have the right to access, correct, export, or delete the personal data we hold about you, to withdraw consent at any time, and to object to or restrict certain processing. To exercise any of these, contact us at [CONTACT EMAIL]. You also have the right to lodge a complaint with a data protection supervisory authority — in Germany, this is the data protection authority of your federal state (Landesdatenschutzbehörde).
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows the most recent version.
