HOW I HANDLE YOUR DATA

Short version: I actively work to not have any.

This site exists because I believe your data belongs to you. It would be hypocritical to track you here. So I don’t.

WHAT I DON’T COLLECT

No cookies. None. Zero. Not even a consent banner (because there’s nothing to consent to). One exception: your light/dark theme preference is saved in your browser’s localStorage. This stays on your device, never leaves it, and contains no personal data.
No analytics. I have no idea how many people visit. I don’t need to know.
No tracking scripts. No Google Analytics. No Facebook Pixel. No “anonymous” telemetry.
No fingerprinting. No canvas fingerprinting, no font detection, nothing.
No third-party fonts. Your browser doesn’t phone home to Google Fonts.

SERVER LOGS

When you visit, my server (a ThinkPad T440p in Italy) logs:

Your IP address — but anonymized. The last octet is zeroed out, so 192.168.1.123 becomes 192.168.1.0. I can see roughly where traffic comes from, but I can’t identify you.
What page you requested
When you requested it

That’s it. No User-Agent. No referrer tracking.

These logs are automatically deleted after 7 days. They exist for one reason: if something breaks, I need to debug it. Once they’re gone, they’re gone. I don’t back them up.

Because IPs are anonymized, I cannot identify individuals from server logs even if I wanted to.

EMBEDDED CONTENT

If I embed a YouTube video, it uses privacy-enhanced mode (youtube-nocookie.com). YouTube won’t set cookies until you click play.

If I embed a tweet, Do Not Track headers are sent.

I avoid embeds when possible. When I use them, I use the most private option available.

WHEN YOU EMAIL ME

If you reach out at igor@thelocalstack.eu, I’ll have your email address and whatever you wrote.

I handle email correspondence like this:

I reply to you
I delete resolved conversations within 30 days
I delete immediately if you ask
I never forward your email to anyone

That’s it. No CRM. No “I’ll follow up in 6 months.”

If you subscribe to the newsletter at thelocalstack.eu, here is exactly what happens with your data.

What I collect:

Your email address
The date and time you confirmed your subscription

That’s it. The signup form does not ask for your name.

Legal basis: Explicit consent. You entered your email, received a confirmation email, and clicked to confirm. You can withdraw consent at any time by unsubscribing.

Where it’s stored: Your email address is stored in a listmonk database running on the same ThinkPad T440p that serves this site. It does not leave my hardware except when I send you an email.

Who can access it: Only me. No third parties have access to the subscriber list.

Data processor: Outgoing emails are delivered via Gandi SAS (Paris, France) acting as an email relay. Gandi processes your email address in transit to deliver the message. Gandi is an EU-based company subject to GDPR. Gandi privacy policy.

How long I keep it: Your email address is kept for as long as you remain subscribed. If you unsubscribe, your record is marked as unsubscribed and deleted within 30 days.

Unsubscribing: Every newsletter contains an unsubscribe link. One click, no questions asked. You can also email igor@thelocalstack.eu and I’ll delete your record manually.

No tracking: Newsletters are sent as plain text. There are no tracking pixels, no open rate monitoring, no click tracking. I don’t know if you read it.

RSS FEED

Anonymous. Your feed reader fetches /index.xml. I see a request in the logs (with an anonymized IP). I don’t know who you are.

YOUR RIGHTS

You’re in the EU. So am I. GDPR gives you rights:

Right	What it means
Access	Ask what data I have about you
Rectification	Ask me to correct inaccurate data
Erasure	Ask me to delete your data
Restriction	Ask me to stop processing your data
Portability	Ask for your data in a machine-readable format
Objection	Object to how I process your data

To exercise any right: email igor@thelocalstack.eu

I’ll respond within 30 days. Usually within a week.

Realistic expectation: Unless you’ve emailed me, I have no data about you. Server logs are anonymized and deleted after 7 days. There’s probably nothing to access, correct, or delete.

DATA CONTROLLER

rogi igor@thelocalstack.eu

CHANGES

If this policy changes, I’ll update it here with a new date at the bottom. No tricks.

WHY THIS MATTERS TO ME

I’m not privacy-focused because it’s trendy. I’m privacy-focused because the alternative is surveillance capitalism, and I refuse to participate.

Every site that tracks you is training models on your behavior, selling your attention, or building profiles to manipulate you. That’s not a conspiracy theory. That’s the business model.

This site is different on purpose. Your visit is yours. I don’t monetize it. I don’t analyze it. I barely even log it.

Your data belongs to you.

Last updated: February 2026

Privacy