Last updated: October 18, 2026
This page explains what personal data this website processes, why, and what rights you have. The short version: there are no cookies, no ads and no tracking across sites. Visits are counted without identifying you.
Controller
Fadi Al Eliwi, address in the imprint. Email: fadieliwi@gmail.com
Hosting and server logs
This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. To deliver a page, Vercel processes the data your browser sends with every request: IP address, date and time, the page requested, the referring page, and browser and operating system. This is needed to deliver the site and keep it secure. The request logs available to me are deleted automatically after one hour. Vercel may keep request data longer to protect its platform against abuse, as described in Vercel's privacy policy.
The legal basis is Art. 6 (1) (f) GDPR, a legitimate interest in running the site reliably and securely. Vercel processes the data on my behalf under a data processing agreement. Vercel is certified under the EU-U.S. Data Privacy Framework, which covers the transfer to the USA (Art. 45 GDPR); the agreement also includes the EU standard contractual clauses.
Visitor statistics and performance
The site uses Vercel Web Analytics and Vercel Speed Insights to count page views and measure how fast pages load. Neither sets cookies or stores anything on your device.
Web Analytics records the page viewed, the referring page, the country, and the browser, operating system and device type. Visitors are told apart by a hash calculated from the request, which is discarded after 24 hours, so you cannot be recognised on a later day. Speed Insights records loading metrics together with the page, the device type and the browser. I only see aggregated figures.
The legal basis is Art. 6 (1) (f) GDPR, a legitimate interest in knowing which content is read and keeping the site fast. You can object at any time (see below), or block the scripts in your browser.
Theme setting
If you switch to the light theme, that choice is saved in your browser's local storage under the key theme. It never leaves your device. This is strictly necessary for a function you asked for (§ 25 (2) No. 2 TDDDG). You can remove it by clearing the site data in your browser.
Fonts and icons
All fonts and icons are served from this site. No requests are made to font or content delivery services of third parties.
Contacting me
If you write to me by email or WhatsApp, I use what you send only to answer you. The legal basis is Art. 6 (1) (b) GDPR where the message is about working together, otherwise Art. 6 (1) (f) GDPR. I delete messages once the conversation is finished, unless I am legally required to keep them. WhatsApp is operated by WhatsApp Ireland Limited, and its own privacy policy applies to messages sent through it.
Booking a call and other external links
“Book a call” opens a booking page on Cal.com. Other links lead to GitHub, LinkedIn and Instagram. These are plain links: nothing is sent to these services until you click one. After that, their privacy policies apply. If you book a call, the details you enter on Cal.com reach me so the call can take place (Art. 6 (1) (b) GDPR).
Data security
The whole site is served over encrypted HTTPS only, and your browser is told to keep using encrypted connections on later visits (HSTS). The site has no login, no forms and no database, and stores no personal data about you itself.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on Art. 6 (1) (f) GDPR, you can object to it at any time for reasons arising from your particular situation (Art. 21). An email is enough.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work. The authority responsible for me is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf
www.ldi.nrw.de
You are not required to provide any personal data. There is no automated decision-making or profiling.
Changes to this policy
I update this policy when the site changes, for example when a new service is added. The date at the top shows the current version.