Last updated: 21 October 2026
1. Who is responsible
EnumByte. Contact: [email protected]. See also the Impressum.
2. Hosting and server logs
The site is a static website hosted on Cloudflare Pages (Cloudflare, Inc., USA, and its affiliates). When you visit, Cloudflare processes technical data needed to deliver the site, such as your IP address, the requested page, date and time, and browser information, and may keep it in server logs for security and operation.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Cloudflare may process data outside the EU, including in the USA. For transfers to the USA Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework and, as a fallback, on the EU Standard Contractual Clauses.
3. Analytics
We use Cloudflare Web Analytics for aggregate traffic statistics (page views and visits). Cloudflare adds a small script to the pages, so your browser loads it from Cloudflare. It does not use cookies or local storage and does not build profiles of individual visitors.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding which content is read).
4. Newsletter
If you subscribe, we use your email address to send the EnumByte newsletter. The newsletter is sent via Brevo, which processes your data on our behalf. We use a double opt-in: you receive a confirmation email and are subscribed only after you click the link. Brevo records the time and IP address of your confirmation as proof of consent.
Legal basis: your consent, Art. 6(1)(a) GDPR. You can unsubscribe at any time using the link in every email; your data is then deleted, except for the minimum needed to prove consent or to honor an unsubscribe.
5. Local storage in your browser
If you switch between light and dark mode, your choice is saved in your browser’s local storage so the site remembers it. It stays on your device, is not sent to us, and contains no personal data. The site itself sets no cookies.
6. Affiliate links
Some links on EnumByte are affiliate links (see the Disclosure). When you click one, you leave this site and go to the partner’s site. The partner (for example Practical DevSecOps and its affiliate-tracking provider) may set cookies and process data under its own privacy policy, so that a purchase can be credited to EnumByte.
We receive only what the partner’s affiliate dashboard shows us: aggregate click statistics and, for people who sign up or buy through our link, limited details such as email address and sign-up date. We use this only to verify commissions and do not use it for marketing.
7. Third-party resources loaded by this site
When you open an article that contains a diagram (not every article does), your browser loads a script from a third-party server: jsDelivr (a content delivery network) delivers the script used to draw diagrams in articles. jsDelivr is operated by Volentio JSD Limited (England and Wales) and serves files from servers worldwide, so it receives your IP address and basic browser information and the request may be handled outside the EU. According to jsDelivr, IP addresses are used only to deliver content and for aggregate statistics, and are not used for marketing.
We use it to deliver diagrams reliably and quickly. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). The site’s font is hosted on this site itself, not by Google.
8. Links to other sites
Articles and share buttons link to other sites (for example LinkedIn, X and GitHub). These are plain links: no data is sent to them until you click.
9. Your rights
You have the right to access, correct, delete or restrict the processing of your personal data, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. Email us at [email protected]. You may also lodge a complaint with a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.
10. Changes
We update this policy when the site or the law changes. The current version is always on this page.