What this site collects
This blog is a personal site run by Johan Malmsten. It is intentionally minimal:
- No cookies are set. The site does not use cookies for any purpose.
- No analytics. There is no tracking script, no Google Analytics, no Plausible, nothing measuring your visit.
- No accounts or comments stored on this site. There is no comment system here. Discussion happens on Bluesky, where each post links out to a corresponding Bluesky post. Conversations there are governed by Bluesky’s own terms and privacy policy, not this site’s.
- No newsletter, no email signup, no contact form.
- Theme preference. If you use the dark mode toggle, your choice is stored in your browser’s local storage so it’s remembered on your next visit. This stays on your device. It is NEVER sent to our server, it isn’t a cookie, and it isn’t used for tracking or analytics.
What is logged
The web server keeps standard access logs to detect abuse and to keep the site running. Each request records:
- IP address
- Timestamp
- Requested URL
- User-Agent string
These logs are kept for 30 days and then deleted. The legal basis for this processing is legitimate interest (Art. 6(1)(f) GDPR) for security and abuse prevention.
Third parties
The site loads content from a few external sources, all of which may receive your IP address and User-Agent when your browser fetches their content:
- Embedded Videos. Some posts contain embedded YouTube players. When you load a post that has one, your browser contacts YouTube. YouTube’s privacy policy applies: https://policies.google.com/privacy
- Bluesky link cards. When this site’s posts are shared on Bluesky, Bluesky’s servers fetch the page to build a preview. This is server-to-server and does not involve your data.
No fonts, scripts, or styles are loaded from third-party servers. All assets are served from this domain.
Your rights under GDPR
You have the right to:
- Request access to any personal data this site has about you (in practice: the access log entries from your IP address)
- Request correction or deletion of that data
- Lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): https://www.imy.se
To exercise any of these rights, contact: contact@jmalmsten.com
Data controller
Johan Malmsten contact@jmalmsten.com
Last updated
This notice was last updated on the date shown at the top of this page.