Privacy and cookies
Version 1 · 9 September 2026
This is a personal site. Most of it stores nothing about you at all: the games, the maps and the toys run entirely in your browser. Where something is stored, this page says what, why, for how long, and how to get rid of it.
Who is responsible
This site is run by Domen Hribernik as a private individual in Slovenia, not as a registered business. For the purposes of the GDPR I am the data controller. There is no data protection officer, because a site this size is nowhere near needing one.
Written questions, requests and complaints all go to contact@domenhribernik.com.
What is collected, and why
One entry per thing the site actually does. If a feature is not listed here, it does not send anything to the server.
An account, if you make one
Signing in is optional and only needed for the tools that save your own work. Sign-in goes through Google, which tells me your Google account identifier, your email address, your display name and the URL of your profile picture. I store those so the account exists and so your saved work comes back to you.
Legal basis: performance of a contract, in the sense that you asked for an account and this is what an account is made of. Kept: until you delete the account, which you can do yourself from the account page.
Sign-in sessions and failed sign-ins
While you are signed in, the server keeps a session row holding your IP address and browser user agent. Failed sign-in attempts are recorded the same way. This is how the site tells your session apart from someone else's, and how it slows down anyone trying passwords in bulk.
Legal basis: legitimate interest in keeping accounts from being broken into. Kept: 30 days, then deleted automatically.
The contact form
Sending me a message stores the name, email address and message you typed. It also stores your browser user agent and a one way hash of your IP address, salted and rotated daily, which lets me spot a flood of spam without keeping anyone's actual IP address. The message is pushed to me over Telegram so I see it, and it stays in the site's database so I can find it again.
Legal basis: legitimate interest in answering people who write to me. Kept: 12 months.
The Everbloom waitlist and the quote form
The Everbloom shop is a design exercise, not a real shop, and nothing on it is for sale. If you join its waitlist it stores your email address, which option you picked and any note you left, so I can send you one message if the idea ever becomes real. The pricing page's quote form stores the contact details and project notes you enter so I can reply with a quote. Both also store a hashed IP and user agent, and both notify me over Telegram.
Legal basis: your consent, given by submitting the form. Kept: waitlist entries until the idea is abandoned or you ask to be removed, quote requests for 12 months.
Things you save in the signed-in tools
The workout log, the flight tracker, the plant and recipe tools and the vocabulary trainer save what you put into them against your account. The flight tracker in particular holds GPS traces, which are location data about you. Nobody else can read any of it, and it is included in the export and the deletion described below.
Legal basis: performance of a contract. Kept: until you delete the item or the account.
Shared lists
The lists tool is the one signed-in tool where other people do see your entries. A list is shared with named accounts, and everyone who has been given a list sees every item on it, together with the name on the account that added it and the name of whoever ticked it off. Items that are ticked off move into that list's history, which keeps the item, its labels, both names and the date, so the people sharing the list can see what was bought and when. If your account is deleted, the entries stay on the list but stop being linked to you.
Legal basis: performance of a contract. Kept: until the item or the whole list is deleted by someone who shares it.
Trips: your photos and where they were taken
Trips is a photo album on a map, so unlike everywhere else on this site it keeps where and when each photo was taken, on purpose. Your phone reads the position and time out of the photo before sending it (or, for a photo you just took, uses where the phone is right now, if you let the browser share that), and those two things are stored next to the photo. The photo file itself still has its metadata stripped. Photos are stored at up to 2048 pixels, not as originals.
A trip is private to you and the people you invite. An invite is a secret link: anyone signed in who opens it joins the trip, sees every place and photo on it, sees your name next to what you added, and can add their own. You can turn the link off or remove someone at any time. The photos are only ever served to the trip's members; there is no public address for them.
One trip of mine is shown to visitors who are not signed in, as a demonstration. If you join that trip, the photos you add to it are shown too, without your name.
If you delete your account, every trip you own is deleted with all its photos, including ones other people added to it. Photos you added to someone else's trip stay there, no longer linked to you, the same way shared list entries do.
Legal basis: performance of a contract. Kept: until you delete the photo, the trip or the account.
Files you upload
Photos and audio you upload are stored on the server. Photos have their EXIF metadata stripped on upload, so the camera details and any GPS coordinates baked into the file are discarded before it is saved. Trips, above, is the one exception that keeps a position, and it keeps it as a separate field you can see and change.
Bouquets you share
Sharing a bouquet from the flowers page writes the bouquet and your note to a file with a random link. Anyone holding the link can read it, which is the point, so do not put anything private in the note. These are deleted automatically after seven days.
Server logs
The web server keeps ordinary access logs containing IP addresses, timestamps and requested URLs, as essentially every web server does. They are used for debugging and for spotting attacks. Legal basis: legitimate interest in keeping the site running.
Analytics, only if you agree
If you accept analytics, Google Analytics records which pages you visit and roughly where in the world you are. It does not run at all unless you say yes, and you can change your mind at any time in the box below. Legal basis: your consent.
Who else sees your data
I do not sell anything to anyone, and there is no advertising on this site. These are the only third parties involved:
- Hetzner, in Germany, hosts the site and its database. Everything described above physically sits on their servers, inside the EU.
- Telegram delivers the alert that tells me a contact message or waitlist signup has arrived. The content of that alert includes what you typed into the form, so Telegram handles it in transit.
- Google verifies your identity when you sign in with a Google account, and runs Analytics if you have accepted it.
- Tawk.to runs the chat widget on the home, about and thesis pages, if you have accepted chat. What you type into the chat goes to them.
Content delivery networks
Some pages load code libraries from public CDNs (Cloudflare's cdnjs, jsDelivr, unpkg and the Tailwind CDN). Loading a file from those exposes your IP address to them, as loading any file from any server does. Webfonts used to work this way too and no longer do: every font on this site is served from this domain, so your browser never contacts Google to draw the text.
The IP Atlas page
One page on this site is a tool for looking up IP addresses. When you press the button to look up your own, your browser queries a set of public geolocation services directly, so those services see your address. Nothing is sent until you press it and nothing is stored here. The map tiles on that page come from CARTO.
The Trips page
Trips draws its map from OpenStreetMap's own tile servers, which see your IP address as they send each piece of the map, the same as any website you load an image from. When you search for a place or name one you tapped on the map, the text or the coordinates go to OpenStreetMap's Nominatim service to find its name. Neither is sent anything about your account or your photos.
The fuel price page
The German fuel price page needs a place before it can show you anything. If you type a town, that text is sent to OpenStreetMap's Nominatim service to turn it into coordinates, so Nominatim sees what you typed. If you press the location button instead, your browser asks you first and the coordinates go only to this site. Either way the coordinates are used to pick which filling stations to look up and are then discarded: there is no table here recording where anyone searched, and nothing about a lookup is tied to you or to your account. What is kept is the filling stations themselves and their prices, which are public data from the Bundeskartellamt.
Transfers outside the EU
Google and Tawk.to are United States companies and Telegram operates outside the EU. Where data reaches them it leaves the EEA. Google is certified under the EU to US Data Privacy Framework. The amount of data involved is small and, for analytics and chat, only happens if you agreed to it.
Your rights
Under the GDPR you can ask me to:
- tell you what I hold about you, and give you a copy of it,
- correct anything that is wrong,
- delete it,
- hand it over in a machine readable file, or send it somewhere else,
- stop or limit a particular use of it,
- and withdraw a consent you gave earlier, which is as easy as giving it.
For an account, the first, fourth and third of those are buttons rather than letters: the account page will export everything held against your account as a JSON file, and will delete the account and its contents for good. Deletion there is real deletion, not a hidden flag.
For anything else, write to contact@domenhribernik.com and I will deal with it within a month. There is no charge.
If you think I have handled your data badly, you can complain to the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec), www.ip-rs.si. You are welcome to raise it with me first, but you do not have to.
Changes and contact
If this policy changes in a way that affects what you agreed to, the version number at the top goes up and the cookie question is asked again. Small corrections happen without ceremony.
Domen Hribernik, Slovenia. contact@domenhribernik.com. See also the terms of use.